ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.
Path Traversal
Oras
NVD
GitHub
CVSS 3.1
7.7
EPSS
1.4%