Distribution

5 CVEs in 1 Distribution product, including Distribution. Newest: CVE-2026-85747 (2026-10-13). Severity, EPSS and public exploits for each.

Distribution products with known CVEs

ProductCVEs
Distribution5
Distribution CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85747Medium6.82026-10-13Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for…
CVE-2026-41888Medium6.52026-05-14Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint…
CVE-2026-35172High7.52026-04-06Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit…
CVE-2026-33540High7.52026-04-06Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull-through cache mode, distribution discovers token auth en…
CVE-2025-249762025-02-11Distribution is a toolkit to pack, ship, store, and deliver container content. Systems running registry versions 3.0.0-beta.1 through 3.0.0-rc.2 with token aut…