Vulnerabilities

TI-2026-24356 CVE-2026-31801 · GHSA-85jx-fm8m-x8c6

zot create-only policy allows overwrite attempts of existing latest tag (update permission not required)

HIGH 67

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00242 Published 2026-03-10 Fixed in v2.1.15, 2.1.15 CWE-863

TI-2025-16993 CVE-2025-23208 · GHSA-c9p4-xwr9-rfhx

HIGH 71

zot is a production-ready vendor-neutral OCI image registry.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0042 Published 2025-01-17 Fixed in 2.1.2 CWE-269

TI-2024-26792 CVE-2024-39897 · GHSA-55r9-5mx9-qq7r

LOW 20

zot is an OCI image registry.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00298 Published 2024-07-09 Fixed in 2.1.0 CWE-639