CVE-2026-66380

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

EUVD-2026-57244

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

CVE-2026-66380: Missing Authorization

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

PT-2026-71104

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user who lacks repository read permissions can access private OCI Open Container Initiative referrer metadata under specific conditions. OCI...

DEBIAN-CVE-2018-20483

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...