Skip to content
OpenAdvisories

Package · Go

zotregistry.io/zot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-39897

    Cache driver GetBlob() allows read access to any blob without access control check

    zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl` policy allows users read access to some repositories but restricts read access to other repositori…

    project-zot zot zotregistry.dev/zot zotregistry.io/zot Go