What’s Vulnerable › Products

oras-project oras vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your oras-project oras version is affected

Latest oras-project oras vulnerabilities

• CVE-2026-55588 — ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption (CVSS 6.5)