ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation
High severity
GitHub Reviewed
Published
May 13, 2026
in
oras-project/oras-java
•
Updated May 19, 2026
Give feedback on Dependabot alerts