Skip to content
OpenAdvisories

Package · Go

github.com/chrismellard/docker-credential-acr-env

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2026-6225

    Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

    In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" (such as ev…

    github.com/chrismellard/docker-credential-acr-env Go