oras-go follows a registry-controlled Location header during the monolithic blob upload flow and reuses the Authorization header from the initial POST request for the subsequent PUT request. If a malicious registry returns a cross-host Location, oras-go sends the caller's credentials to an attacker-controlled endpoint. Fixed in oras-go v2.6.1.