Skip to content
OpenAdvisories
Medium DLA-3473-1 1 CVE

docker-registry - security update

Published Jun 29, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 docker-registry 2.6.2~ds1-2+deb10u1

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-2253

    distribution catalog API endpoint can lead to OOM via malicious user input

    A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for…

    aactl argocd-image-updater kubernetes-dashboard bom Debian Ubuntu Azure Linux Wolfi Go