Skip to content
Pproject-zot
Products
| Product | CVEs | Exploited | Latest |
|---|
| zot | 5 | – | Sep 18, 2026 |
Exploited and recent CVEs
-
CVE-2026-61833
High 8.1
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion
0.8%
-
CVE-2026-31801
High 7.7
zot create-only policy allows overwrite attempts of existing latest tag (update permission not required)
0.2%
-
CVE-2025-48374
Medium 5.5
zot logs secrets
0.2%
-
CVE-2025-23208
High 7.3
IdP group membership revocation ignored in zot
0.4%
-
CVE-2024-39897
Medium 4.3
Cache driver GetBlob() allows read access to any blob without access control check
0.3%