oras.land/oras-go/v2 vulnerabilities (Root)
3 vulnerabilities.
oras.land/oras-go/v2Rootoras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)8.8 Highoras.land/oras-go/v2Rootoras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction7.1 Highoras.land/oras-go/v2Rootoras-go: credential forwarding via unvalidated Location header in blob upload7.5 High