docker-registry vulnerabilities (Debian)
6 vulnerabilities.
-
docker-registryDebian Distribution: Client `manifests.Get()` does not verify returned content against requested digest 6.8 Medium -
docker-registryDebian Distribution: Tag deletion bypasses `storage.delete.enabled` configuration 6.3 Medium -
docker-registryDebian Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation 7.5 High -
docker-registryDebian Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm 7.5 High -
docker-registryDebian distribution catalog API endpoint can lead to OOM via malicious user input 6.5 Medium -
docker-registryDebian Docker Registry has Allocation of Resources Without Limits or Throttling 7.5 High