Debian/docker-registry: high 7.5

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull-through cache mode, distribution discovers token auth endpoints by parsing WWW-Authenticate chall

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2026-33540
• https://security-tracker.debian.org/tracker/CVE-2026-33540

published 2026-04-06T15:17:10.950Z · modified 2026-10-01T03:03:10.887702Z · JSON