Distribution vulnerabilities
We track 2 vulnerabilities in Distribution products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Distribution vulnerabilities
- 7.5 High severity
distribution: Improper Access Control
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. T
- 7.5 High severity
distribution: Server-Side Request Forgery
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull-through cache mode, distribution discovers token auth endpoints by parsing WWW-Authenticate challenges returned by the configured upstream registry. The real