Project-Zot

5 CVEs across 1 Project-Zot products. Browse Project-Zot vulnerabilities, severities, and proof-of-concept exploits.

Project-Zot products with known CVEs

ProductCVEs
Zot5
Project-Zot CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61833High8.12026-09-18zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication ha…
CVE-2026-31801High7.72026-03-10zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. From 1.3.0 to 2.1.14, zot’s dist-spec authorizati…
CVE-2025-483742025-05-22zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudove…
CVE-2025-23208High7.32025-01-17zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (meta.db) is an append-list so group revoca…
CVE-2024-39897Medium4.32024-07-09zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl…