Maven/land.oras:oras-java-sdk: high 8.1
ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation
Action: Upgrade land.oras:oras-java-sdk to 0.6.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: GHSA-xm96-gfjx-jcrc
- https://github.com/oras-project/oras-java/security/advisories/GHSA-xm96-gfjx-jcrc
- https://github.com/oras-project/oras-java
published · modified · JSON