| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-85732 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, th ... |
| CVE-2026-85731 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, co ... |
| CVE-2026-50163 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, en ... |
| CVE-2026-50162 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, re ... |
| CVE-2026-50151 | fixed | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, re ... |
| CVE-2026-48978 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, au ... |