Distribution vulnerabilities
Products
Newest
- distribution Distribution: Client `manifests.Get()` does not verify returned content against requested digest 6.8 Medium
- distribution Distribution: Tag deletion bypasses `storage.delete.enabled` configuration 6.3 Medium
- distribution, red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +7 more +9 more Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation 7.5 High
- distribution Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm 7.5 High
- distribution Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT 6.6 Medium