CVE-2026-55588 | oras-project oras up to 1.3.2 Recursive Referrer Traversal recursion

August 25, 2026 Yanac

A vulnerability, which was classified as problematic, was found in oras-project oras up to 1.3.2. Affected by this issue is some unknown functionality of the component Recursive Referrer Traversal. Such manipulation leads to uncontrolled recursion.

This vulnerability is traded as CVE-2026-55588. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More