oras.land/oras-go
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens | oras.land/oras-go/v2oras.land/oras-go | GoRed Hat | Low | Fix reported |