All products

github.com/docker/distribution

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Distribution: Client `manifests.Get()` does not verify returned content against requested digestCVE-2026-85747 · GHSA-685W-Q87J-WQW3Version ranges need review. github.com/distribution/distribution/v3github.com/distribution/distribution GoRed Hat Medium Fix reported
distribution catalog API endpoint can lead to OOM via malicious user inputCVE-2023-2253 · GHSA-HQXW-F8MX-CPMW github.com/distribution/distributiongithub.com/docker/distribution GoRed Hat High Fix reported
OCI Manifest Type Confusion IssueGHSA-QQ97-VM5H-RRHG · GO-2022-0379Version ranges need review. github.com/docker/distribution Go Low Fix reported
Docker Registry has Allocation of Resources Without Limits or ThrottlingCVE-2017-11468 · GHSA-H62F-WM92-2CMWVersion ranges need review. github.com/docker/distribution Go High Fix reported