CVE-2026-27771

CVE-2026-27771 — Gitea Container Registry Auth Bypass CVSS: N/A unpublished Affects: Gitea Disclaimer: This proof-of-concept is provided for educational and authorized security research purposes only. Unauthorized access to computer systems is illegal. The authors are not responsible for any misu...

CVE-2026-61833 zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to the push action, so DELETE requests are not checked for the...

CVE-2026-5530

CVE-2026-5530 Ollama SSRF via OCI registry redirect with full response exfiltration. Writeup: https://davidrochester.com/posts/cve-2026-5530 Disclosure Ollama was contacted multiple times with no response. Usage Three modes: enum, exfil, and probe. Enum Finds live internal endpoints reachable fro...

SUSE CVE-2026-55588

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

EUVD-2026-66110

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption...

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...

GHSA-298F-872V-2RCX ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...

GHSA-MF7Q-R4RV-JV94 Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check

Summary Crossplane allows package signature verification to be configured via the ImageConfig mechanism. When enabled, the package manager uses cosign to verify that packages are correctly signed before pulling and installing them. When a package is installed using a tag reference e.g., a semanti...

CVE-2026-55588

A flaw was found in ORAS OCI Registry As Storage CLI. A remote attacker, by operating a malicious OCI Open Container Initiative registry that returns a cyclic referrer graph, could cause unbounded recursion and memory growth in the client. This vulnerability leads to a client-side Denial of Servi...

Linux Distros Unpatched Vulnerability : CVE-2026-55588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referr...

CVE-2026-55588

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

UBUNTU-CVE-2026-55588

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

CVE-2026-55588

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

PT-2026-81849

Name of the Vulnerable Software and Affected Versions ORAS CLI versions prior to 1.3.3 Description Recursive referrer traversal fails to track visited descriptors, allowing a malicious OCI registry to return a cyclic referrer graph. This leads to unbounded recursion and memory growth, resulting i...

OESA-2026-3402 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an O...

CVE-2026-49349

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...

CVE-2026-66380 Authenticated users may access private OCI referrer metadata

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

CVE-2026-66380

CVE-2026-66380 describes a access control bypass where an authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. The public metrics indicate CVSS 3.1 base score 4.3 (Medium), with attack vector NETWORK and privileges required LOW,...