Skip to content
OpenAdvisories

Package · Go

zotregistry.dev/zot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-48374

    zot logs secrets

    zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecre…

    project-zot zot zotregistry.dev/zot Go
  • Medium 4.3
    CVE-2024-39897

    Cache driver GetBlob() allows read access to any blob without access control check

    zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl` policy allows users read access to some repositories but restricts read access to other repositori…

    project-zot zot zotregistry.dev/zot zotregistry.io/zot Go