CVE-2026-81501

Summary A project-restricted TLS client that cannot "GET /1.0/images/fingerprint" for a private image in another project can still import that same fingerprint into their own project. "imageDownload" reuses any matching local image via "GetImageFromAnyProject" without checking "Public" or...