Skip to content

ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation

High severity GitHub Reviewed Published May 13, 2026 in oras-project/oras-java • Updated May 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts