Hi Team,
I have crated a PR to fix some high security issues.

https://github.com/oras-project/oras/security/advisories/GHSA-6fh6-vfc8-q52m

can you please review and merge,

also do when we can expect a patch release with the issues resolved.?

thanks for your help and support.