oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a GET request to the attacker-selected URL from the victim's network, allowing blind server-side request forgery against internal services. The response body is not returned to the attacker, but timing and error differences can reveal service reachability, and credentials may be attached when the credential store has an entry for the target host. Exploitation requires a victim to perform a pagination-based listing operation against a malicious registry. The maintainer identifies this report as a duplicate of GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated issue is fixed in version 2.6.2.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3153 advisory.

    On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root     when the final path component of the a path is a symbolic link and the path ends in /. For example,     'root.Open(symlink/)' will open symlink even when symlink is a symbolic link pointing outside of the     root. (CVE-2026-39822)

    Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a     disclosure of pre-shared key identities in the unencrypted client hello. (CVE-2026-42505)

    A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of     the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a     malicious registry or performing a man-in-the-middle attack, could exploit this to perform Server-Side     Request Forgery (SSRF) against internal networks, potentially disclosing sensitive information.
    Additionally, the flaw could lead to a Transport Layer Security (TLS) downgrade, causing user credentials     to be sent over plaintext. (CVE-2026-48978)

    oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in     registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without     validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a     GET request to the attacker-selected URL from the victim's network, allowing blind server-side request     forgery against internal services. The response body is not returned to the attacker, but timing and error     differences can reveal service reachability, and credentials may be attached when the credential store has     an entry for the target host. Exploitation requires a victim to perform a pagination-based listing     operation against a malicious registry. The maintainer identifies this report as a duplicate of     GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated     issue is fixed in version 2.6.2. (CVE-2026-85732)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of soci-snapshotter installed on the remote host is prior to 0.16.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-143 advisory.

    On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root     when the final path component of the a path is a symbolic link and the path ends in /. For example,     'root.Open(symlink/)' will open symlink even when symlink is a symbolic link pointing outside of the     root. (CVE-2026-39822)

    Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a     disclosure of pre-shared key identities in the unencrypted client hello. (CVE-2026-42505)

    A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of     the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a     malicious registry or performing a man-in-the-middle attack, could exploit this to perform Server-Side     Request Forgery (SSRF) against internal networks, potentially disclosing sensitive information.
    Additionally, the flaw could lead to a Transport Layer Security (TLS) downgrade, causing user credentials     to be sent over plaintext. (CVE-2026-48978)

    oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in     registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without     validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a     GET request to the attacker-selected URL from the victim's network, allowing blind server-side request     forgery against internal services. The response body is not returned to the attacker, but timing and error     differences can reveal service reachability, and credentials may be attached when the credential store has     an entry for the target host. Exploitation requires a victim to perform a pagination-based listing     operation against a malicious registry. The maintainer identifies this report as a duplicate of     GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated     issue is fixed in version 2.6.2. (CVE-2026-85732)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory.

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265758).
    - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted     plugin       (bsc#1261939).
    - CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to     insufficient plugin       provenance verification (bsc#1261935).
    - CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted     Chart       (bsc#1261938).
    - CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of     raw-length       headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).
    - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the     storage.delete.enabled       configuration (bsc#1265428).
    - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token     realm to       exfiltrate credentials and refresh tokens (bsc#1270127).
    - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload     (bsc#1271660).
    - CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks     (bsc#1276327).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input     (bsc#1271997).
    - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families     (bsc#1281426).
    - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).
    - CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).
    - CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).
    - CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).
    - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS     certificate bypass       allows log telemetry interception and alteration (bsc#1281468).
    - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-     driven log emission       (bsc#1281469).
    - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows     internal network       probing (bsc#1281112).
    - gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server     implementation       (bsc#1276514).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4417-1 advisory.

    - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain     bypass in tar       extraction (bsc#1281104).
    - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows     internal network       probing (bsc#1281112).

    Changes for helm:

    - Update to version 3.22.0:
     * chore(deps): bump the k8s-io group across 1 directory with 6 updates
     * bump version to 3.22 (#32606)
     * fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362)
     * chore(deps): bump the k8s-io group with 7 updates (#32573)
     * chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563)
     * chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554)
     * chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542)
     * [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 (#32536)
     * fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 (#32535)
     * chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6
     * fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
     * chore(deps): bump the k8s-io group with 7 updates
     * chore(deps): bump github/codeql-action/upload-sarif (#32449)
     * chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2
     * chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2
     * chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2
     * chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381)
     * chore(deps): bump github/codeql-action/upload-sarif (#32382)
     * ci: auto-label PRs targeting dev-v3 (#32340)
     * chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331)
     * chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332)
     * chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357)
     * chore(deps): bump github/codeql-action/upload-sarif (#32360)
     * chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359)
     * chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356)
     * chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354)
     * chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353)
     * chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310)
     * chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
     * chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306)
     * fix(engine): prevent Files.Lines panic on empty file
     * fix: drop containerd v1 dep to resolve govulncheck CVEs
     * chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33
     * chore(deps): bump github.com/cyphar/filepath-securejoin
     * chore(deps): bump the k8s-io group with 2 updates
     * chore(deps): bump the k8s-io group across 1 directory with 2 updates
     * fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1
     * chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1
     * chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
     * chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0
     * chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0
     * ci: bump golangci-lint to v2.11.3 for go 1.26
     * chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3
     * chore(deps): bump github.com/distribution/distribution/v3
     * chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32
     * chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0
     * chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13
     * chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0
     * fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026
     * chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0
     * chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0
     * [v3] Bump to version v3.21 (#32103)
     * [v3 backport] Fix rollback for missing resources
     * fix(action): avoid nil REST client getter panic when installing CRDs

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in
    registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without
    validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a
    GET request to the attacker-selected URL from the victim's network, allowing blind server-side request
    forgery against internal services. The response body is not returned to the attacker, but timing and error
    differences can reveal service reachability, and credentials may be attached when the credential store has
    an entry for the target host. Exploitation requires a victim to perform a pagination-based listing
    operation against a malicious registry. The maintainer identifies this report as a duplicate of
    GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated
    issue is fixed in version 2.6.2. (CVE-2026-85732)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory.

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265758).
    - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted     plugin       (bsc#1261939).
    - CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to     insufficient plugin       provenance verification (bsc#1261935).
    - CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted     Chart       (bsc#1261938).
    - CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of     raw-length       headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).
    - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the     storage.delete.enabled       configuration (bsc#1265428).
    - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token     realm to       exfiltrate credentials and refresh tokens (bsc#1270127).
    - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload     (bsc#1271660).
    - CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks     (bsc#1276327).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input     (bsc#1271997).
    - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families     (bsc#1281426).
    - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).
    - CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).
    - CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).
    - CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).
    - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS     certificate bypass       allows log telemetry interception and alteration (bsc#1281468).
    - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-     driven log emission       (bsc#1281469).
    - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows     internal network       probing (bsc#1281112).
    - gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server     implementation       (bsc#1276514).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in     registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without     validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a     GET request to the attacker-selected URL from the victim's network, allowing blind server-side request     forgery against internal services. The response body is not returned to the attacker, but timing and error     differences can reveal service reachability, and credentials may be attached when the credential store has     an entry for the target host. Exploitation requires a victim to perform a pagination-based listing     operation against a malicious registry. The maintainer identifies this report as a duplicate of     GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated     issue is fixed in version 2.6.2. (CVE-2026-85732)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365237	Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-3153)	Nessus	Amazon Linux Local Security Checks	Local	low
365199	Amazon Linux 2 : soci-snapshotter (ALASDOCKER-2026-143)	Nessus	Amazon Linux Local Security Checks	Local	low
363069	SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)	Nessus	SuSE Local Security Checks	Local	high
362806	SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:4417-1)	Nessus	SuSE Local Security Checks	Local	high
459321	Echo: oras.land/oras-go/v2: security update to 2.6.2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459321	Echo: oras.land/oras-go/v2: security update to 2.6.2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
362531	openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)	Nessus	SuSE Local Security Checks	Local	high
348302	Linux Distros Unpatched Vulnerability : CVE-2026-85732	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-85732

medium

Tenable Plugins

low

low

high

high

medium

medium

high

medium