Project-zot vulnerabilities
Products
- Zot 5
Newest
- project-zot zot zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion 8.1 High
- project-zot zot zot create-only policy allows overwrite attempts of existing latest tag (update permission not required) 7.7 High
- project-zot zot zot logs secrets 5.5 Medium
- project-zot zot IdP group membership revocation ignored in zot 7.3 High
- project-zot zot Cache driver GetBlob() allows read access to any blob without access control check 4.3 Medium