VYPR

storage/pkg/archive

by Red Hat

CVEs (1)

  • CVE-2026-114236LowOct 21, 2026
    risk 0.21cvss 3.3epss —

    storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit