Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-65388 A remote attacker who controls a container registry may be able to direct a client's token request to a host of the…

Description

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Produits et versions touchés

Produit Versions touchées Corrigé en
Containerization 0.41 premières → < 0.41.0 0.41.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Containerization

Les 3 CVE de Containerization →
CVE-2026-113957 An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image… 5.6 Moyenne CVE-2026-20613 The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname… 7.8 Élevée
Suivre cette CVE