CVE-2026-66380

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

EUVD-2026-57244

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

PT-2026-71104

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

DEBIAN-CVE-2018-20483

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...