Skip to content

[GHSA-fxhp-mv3v-67qp] oras-go tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution#8681

Open
onelapahead wants to merge 1 commit into
onelapahead/advisory-improvement-8681from
onelapahead-GHSA-fxhp-mv3v-67qp
Open

[GHSA-fxhp-mv3v-67qp] oras-go tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution#8681
onelapahead wants to merge 1 commit into
onelapahead/advisory-improvement-8681from
onelapahead-GHSA-fxhp-mv3v-67qp

Commits

Commits on Jul 12, 2026