{"action":"Upgrade github.com/docker/distribution to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"github.com/docker/distribution","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-qq97-vm5h-rrhg","id":"tcs_01M5KFKB03MFE260JTFM3SYGAM","modified_at":"2026-08-07T08:12:31.384046104Z","published_at":"2022-02-08T18:53:56Z","references":["https://osv.dev/vulnerability/GHSA-qq97-vm5h-rrhg","https://github.com/distribution/distribution/security/advisories/GHSA-qq97-vm5h-rrhg","https://github.com/opencontainers/image-spec/pull/411","https://github.com/distribution/distribution/commit/b59a6f827947f9e0e67df0cfb571046de4733586","https://github.com/distribution/distribution","https://pkg.go.dev/vuln/GO-2022-0379"],"severity":{"label":"low","score":3},"sources":[{"source":"osv","source_id":"GHSA-qq97-vm5h-rrhg","url":"https://osv.dev/vulnerability/GHSA-qq97-vm5h-rrhg"}],"summary":"OCI Manifest Type Confusion Issue"}