Skip to content
OpenAdvisories
Medium DSA-5414-1 1 CVE

docker-registry - security update

Published May 27, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 docker-registry 2.7.1+ds2-7+deb11u1

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-2253

    distribution catalog API endpoint can lead to OOM via malicious user input

    A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for…

    aactl argocd-image-updater kubernetes-dashboard bom Debian Ubuntu Azure Linux Wolfi Go