github.com/docker/distribution

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.8

CVE-2026-85747

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body ag…

distribution distribution docker-registry docker-registry Debian Ubuntu Go

Oct 13, 2026
Medium 6.5

CVE-2023-2253

distribution catalog API endpoint can lead to OOM via malicious user input

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for…

docker-registry docker-registry github.com/distribution/distribution github.com/docker/distribution Debian Ubuntu Go

Jun 6, 2023