diff --git a/go.mod b/go.mod
index 8d248fd1..0497ce5d 100644
--- a/go.mod
+++ b/go.mod
@@ -6,7 +6,7 @@ require (
 	github.com/containerd/containerd v1.6.6
 	github.com/docker/cli v20.10.0-rc1+incompatible
 	github.com/drone/envsubst v1.0.2
-	github.com/gardener/component-spec/bindings-go v0.0.66
+	github.com/gardener/component-spec/bindings-go v0.0.72
 	github.com/gardener/image-vector v0.10.0
 	github.com/ghodss/yaml v1.0.0
 	github.com/go-logr/logr v1.2.3
diff --git a/go.sum b/go.sum
index dfb5fa77..0939763e 100644
--- a/go.sum
+++ b/go.sum
@@ -141,8 +141,8 @@ github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMo
 github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=
 github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
 github.com/gardener/component-spec/bindings-go v0.0.52/go.mod h1:kQFMTWowNAp9tOp6aImQa/NoLzfvX29jN5Qgud9rpQU=
-github.com/gardener/component-spec/bindings-go v0.0.66 h1:FvtnnTxXJi2ZCC/GgijUNJCcwwdlZAiEWpZTtyHviz0=
-github.com/gardener/component-spec/bindings-go v0.0.66/go.mod h1:qr7kADDXbXB0huul+ih/B43YkwyiMFYQepp/tqJ331c=
+github.com/gardener/component-spec/bindings-go v0.0.72 h1:RQ6TZhKTfYuQ9ztPHDROj74csJHBLqcE9kQtpnKq808=
+github.com/gardener/component-spec/bindings-go v0.0.72/go.mod h1:qr7kADDXbXB0huul+ih/B43YkwyiMFYQepp/tqJ331c=
 github.com/gardener/image-vector v0.10.0 h1:Ysg3hxfiGUG/doajiZ0nQuUaJYwfO5BZCOcijL3tRuo=
 github.com/gardener/image-vector v0.10.0/go.mod h1:32SHGcbmmueeK9VkawsFcEbsoENXQPIuuYiFBUP+vMQ=
 github.com/ghodss/yaml v0.0.0-20150909031657-73d445a93680/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
diff --git a/vendor/github.com/gardener/component-spec/bindings-go/apis/v2/validation/validation.go b/vendor/github.com/gardener/component-spec/bindings-go/apis/v2/validation/validation.go
index 42644893..8a110d09 100644
--- a/vendor/github.com/gardener/component-spec/bindings-go/apis/v2/validation/validation.go
+++ b/vendor/github.com/gardener/component-spec/bindings-go/apis/v2/validation/validation.go
@@ -209,7 +209,7 @@ func ValidateComponentReferences(fldPath *field.Path, refs []v2.ComponentReferen
 
 		id := string(ref.GetIdentityDigest())
 		if _, ok := refIDs[id]; ok {
-			allErrs = append(allErrs, field.Duplicate(refPath, "duplicate component reference name"))
+			// allErrs = append(allErrs, field.Duplicate(refPath, "duplicate component reference name"))
 			continue
 		}
 		refIDs[id] = struct{}{}
diff --git a/vendor/github.com/gardener/component-spec/bindings-go/oci/resolve.go b/vendor/github.com/gardener/component-spec/bindings-go/oci/resolve.go
index 38ecf5be..a89bc4cd 100644
--- a/vendor/github.com/gardener/component-spec/bindings-go/oci/resolve.go
+++ b/vendor/github.com/gardener/component-spec/bindings-go/oci/resolve.go
@@ -54,6 +54,10 @@ func OCIRef(repoCtx v2.OCIRegistryRepository, name, version string) (string, err
 		// add dummy protocol to correctly parse the the url
 		baseUrl = "http://" + baseUrl
 	}
+
+	if len(baseUrl) > 2048 {
+		return "", fmt.Errorf("baseUrl too long (>2048)")
+	}
 	u, err := url.Parse(baseUrl)
 	if err != nil {
 		return "", err
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 476bcbc9..804bc58b 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -52,7 +52,7 @@ github.com/drone/envsubst/path
 # github.com/fsnotify/fsnotify v1.4.9
 ## explicit; go 1.13
 github.com/fsnotify/fsnotify
-# github.com/gardener/component-spec/bindings-go v0.0.66
+# github.com/gardener/component-spec/bindings-go v0.0.72
 ## explicit; go 1.18
 github.com/gardener/component-spec/bindings-go/apis
 github.com/gardener/component-spec/bindings-go/apis/v2