Project-zot Zot vulnerabilities
- project-zot zotzot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion8.1 High
- project-zot zotzot create-only policy allows overwrite attempts of existing latest tag (update permission not required)7.7 High
- project-zot zotzot logs secrets5.5 Medium
- project-zot zotIdP group membership revocation ignored in zot7.3 High
- project-zot zotCache driver GetBlob() allows read access to any blob without access control check4.3 Medium