zotregistry.dev/zot/v2 vulnerabilities (Go)

2 vulnerabilities.

• zotregistry.dev/zot/v2 Go zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion CVE-2026-61833 Fix available 8.1 HighSeptember 18, 2026
• zotregistry.dev/zot/v2 Go zot create-only policy allows overwrite attempts of existing latest tag (update permission not required) CVE-2026-31801 Fix available 7.7 HighMarch 10, 2026