project-zot vulnerabilities
5 published CVEs name project-zot among the affected products.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61833
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion
project-zot · zot
High8.1 - CVE-2026-31801
zot create-only policy allows overwrite attempts of existing latest tag (update permission not required)
project-zot · zot
High7.7 - CVE-2025-48374
zot logs secrets
project-zot · zot
Medium5.5 - CVE-2025-23208
IdP group membership revocation ignored in zot
project-zot · zot
High7.3 - CVE-2024-39897
Cache driver GetBlob() allows read access to any blob without access control check
project-zot · zot
Medium4.3