zotregistry.dev/zot vulnerabilities (Go)
5 vulnerabilities.
-
zotregistry.dev/zotGo zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion 8.1 High -
zotregistry.dev/zotGo zot create-only policy allows overwrite attempts of existing latest tag (update permission not required) 7.7 High -
zotregistry.dev/zotGo zot logs secrets 5.5 Medium -
zotregistry.dev/zotGo IdP group membership revocation ignored in zot 7.3 High -
zotregistry.dev/zotGo Cache driver GetBlob() allows read access to any blob without access control check 4.3 Medium