zotregistry.dev/zot
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion | zotregistry.dev/zot/v2zotregistry.dev/zot | Go | High | Fix reported | |
| Zot IdP group membership revocation ignored | zotregistry.dev/zot | Go | High | Fix reported | |
| Cache driver GetBlob() allows read access to any blob without access control check | zotregistry.dev/zotzotregistry.io/zot | Go | Medium | Fix reported | |
| zot’s create-only policy allows overwrite attempts of existing latest tag (update permission not required) | zotregistry.dev/zot/v2zotregistry.dev/zot | Go | High | Fix reported | |
| zot logs secrets | zotregistry.dev/zot | Go | Medium | Fix reported |