zot vulnerabilities

2 known vulnerabilities in zot from Project-zot. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  zot: Improper Authorization

  CVE-2026-61833Sep 18, 2026Project-zot

  zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to the push action, so DELET

• 7.7 High severity

  zot: Incorrect Authorization

  CVE-2026-31801Mar 10, 2026Project-zot

  zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. From 1.3.0 to 2.1.14, zot’s dist-spec authorization middleware infers the required action for PUT /v2/{name}/manifests/{reference} as create by defaul