distribution vulnerabilities
5 published CVEs name distribution among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-85747
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
distribution · distribution
Medium6.8 - CVE-2026-41888
Distribution: Tag deletion bypasses `storage.delete.enabled` configuration
distribution · distribution
Medium6.3 - CVE-2026-35172
Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation
distribution · distribution
High7.5 - CVE-2026-33540
Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm
distribution · distribution
High7.5 - CVE-2025-24976
Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT
distribution · distribution
Medium6.6