178222 matches found
EUVD-2026-57395
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer role to modify certain package registry metadata without the required...
CVE-2026-8667
GitLab CE/EE contains an authorization-level issue: under certain conditions an authenticated user with the developer role could modify package registry metadata without maintainer permissions. Affected versions: 17.6 up to 19.0.5, 19.1 up to 19.1.3, and 19.2 up to 19.2.1. Remediation patches rel...
CVE-2026-8667 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer role to modify certain package registry metadata without the required...
CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CVE-2026-66380
CVE-2026-66380 describes a access control bypass where an authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. The public metrics indicate CVSS 3.1 base score 4.3 (Medium), with attack vector NETWORK and privileges required LOW,...
CVE-2026-49349
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...
CVE-2026-49349 regclient may leak authentication credentials to external blob stores
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...
CVE-2026-49349
CVE-2026-49349 affects the Go-based regclient library. Before version 0.11.5, credentials for a registry could be leaked to external servers when interacting with a malicious registry, blob store, or a registry that doesn’t restrict external URLs for foreign blobs. The root cause is an insecure c...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
EUVD-2026-56318
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345
CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...
EUVD-2026-56317
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138
CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...