Skip to content
OpenAdvisories

Package · Go

github.com/deislabs/oras

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    CVE-2021-21272

    zip slip in ORAS

    ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The director…

    deislabs oras github.com/deislabs/oras Go