Vulnerabilities

TI-2026-44252 CVE-2026-61833 · GHSA-qg67-7m6v-qg25

zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

HIGH 68

zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00811 Published 2026-09-18 Fixed in 2.1.18 CWE-285

TI-2026-24356 CVE-2026-31801 · GHSA-85jx-fm8m-x8c6

HIGH 67

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00242 Published 2026-03-10 Fixed in v2.1.15, 2.1.15 CWE-863

TI-2025-30700 CVE-2025-48374 · GHSA-c37v-3c8w-crq8

LOW 24

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00181 Published 2025-05-22 Fixed in 1.4.4-0.20250522160828-8a99a3ed231f CWE-532

TI-2025-16993 CVE-2025-23208 · GHSA-c9p4-xwr9-rfhx

HIGH 71

zot is a production-ready vendor-neutral OCI image registry.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0042 Published 2025-01-17 Fixed in 2.1.2 CWE-269

TI-2024-26792 CVE-2024-39897 · GHSA-55r9-5mx9-qq7r

LOW 20

zot is an OCI image registry.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00298 Published 2024-07-09 Fixed in 2.1.0 CWE-639