Security: ostreedev/ostree
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Heap buffer overflow via integer truncation in static delta bspatch on 32-bit systemsGHSA-xppc-j946-vcj7 published
Aug 5, 2026 by jmarreroModerate -
Unbounded LZMA decompression in static delta processing allows denial of service via decompression bombGHSA-7cgc-gp99-6jmm published
Aug 5, 2026 by jmarreroModerate -
ed25519: Invalid out of bound readsGHSA-gqf4-p3gv-g8vw published
Jul 22, 2022 by cgwaltersLow
Learn more about advisories related to ostreedev/ostree in the GitHub Advisory Database