Project-zot vulnerabilities
We track 2 vulnerabilities in Project-zot products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Project-zot vulnerabilities
- 8.1 High severity
zot: Improper Authorization
zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to the push action, so DELET
- 7.7 High severity
zot: Incorrect Authorization
zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. From 1.3.0 to 2.1.14, zot’s dist-spec authorization middleware infers the required action for PUT /v2/{name}/manifests/{reference} as create by defaul