GO-2025-3705 zot logs secrets in zotregistry.dev/zot

zot logs secrets in zotregistry.dev/zot...

CVE-2025-48374

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f, when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: zot, melange, k3s, wolfictl...

CVE-2025-47291 vulnerabilities

Vulnerabilities for packages: zot, melange, k3s, wolfictl...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: k3s, cg, zot, wolfictl, melange...

CVE-2025-47291 vulnerabilities

Vulnerabilities for packages: k3s, cg, zot, wolfictl, melange...

CVE-2025-48374

Summary: CVE-2025-48374 affects zot, a container image/artifact registry. When using Keycloak as an OpenID Connect provider, the clientsecret is echoed to container stdout logs during startup in versions prior to 2.1.3 (pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f). The issue stems from logg...

CVE-2025-48374 zot logs secrets

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f, when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout...

CVE-2025-48374 zot logs secrets

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f, when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout...

CVE-2025-48374 zot logs secrets

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f, when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File due to the logging configuration, an attacker can access sensitive information by exploiting the exposed logs using Keycloak as an OIDC provider clientsecret containing secret credentials...

PT-2025-22564 · Red Hat +1 · Keycloak +1

Name of the Vulnerable Software and Affected Versions: zot versions prior to 2.1.3 Description: The issue concerns the exposure of the Keycloak client secret in the container stdout logs at startup when using Keycloak as an OIDC provider. This occurs due to a flaw in handling sensitive informatio...

zot 日志信息泄露漏洞

zot is an OCI image registry open-sourced by The zot Project. A log information disclosure vulnerability exists in versions prior to zot 2.1.3, which stems from a Keycloak client key being printed to the container log, potentially leading to the disclosure of sensitive information...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker, docker-compose, kots, cilium-cli, envoy-gateway, osv-scanner, zarf, k8sgpt, k3s, linkerd2, rancher-fleet, kubescape, grype, spegel, newrelic-infrastructure-agent, syft, fuse-overlayfs-snapshotter, eksctl, skaffold, helm-operator, ctop, flux-helm-controller,...

GHSA-PHW4-MC57-4HWC vulnerabilities

Vulnerabilities for packages: zot, kots...

GHSA-PHW4-MC57-4HWC vulnerabilities

Vulnerabilities for packages: harbor-fips, zot, kots, harbor...

CVE-2025-24976 vulnerabilities

Vulnerabilities for packages: zot, kots...

CVE-2025-24976 vulnerabilities

Vulnerabilities for packages: harbor-fips, zot, kots, harbor...

CVE-2025-23208

zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database meta.db is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended...

SUSE CVE-2025-23208

zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database meta.db is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended...