project-zot zot

• CVE-2026-61833 High 8.1 zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion 0.8%
• CVE-2026-31801 High 7.7 zot create-only policy allows overwrite attempts of existing latest tag (update permission not required) 0.2%
• CVE-2025-48374 Medium 5.5 zot logs secrets 0.2%
• CVE-2025-23208 High 7.3 IdP group membership revocation ignored in zot 0.4%
• CVE-2024-39897 Medium 4.3 Cache driver GetBlob() allows read access to any blob without access control check 0.3%