Vulnerability GO-2026-6778
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
Distribution: Client does not verify returned content against requested digest in github.com/distribution/distribution
*
*
Summary
Distribution: Client does not verify returned content against requested digest in github.com/distribution/distribution
Details
Distribution: Client does not verify returned content against requested digest in github.com/distribution/distribution
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
21 days ago
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
<3.1.2 GHSA-685w-q87j-wqw3
<3.1.2 GHSA-685w-q87j-wqw3
Medium Risk
21 days ago
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
<=2.8.3 GHSA-685w-q87j-wqw3
<=2.8.3 GHSA-685w-q87j-wqw3
Unknown
2 months ago
Stale blob descriptor cache invalidation in github.com/distribution/distribution
* GO-2026-4942
* GO-2026-4942
Unknown
2 months ago
Stale blob descriptor cache invalidation in github.com/distribution/distribution
<3.1.0 GO-2026-4942
<3.1.0 GO-2026-4942
Unknown
4 months ago
Distribution's tag deletion bypasses `storage.delete.enabled` configuration in github.com/distribution/distribution
* GO-2026-5185
* GO-2026-5185
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Fixed (v3.1.2)
1 month ago
September 24, 2026 at 11:43 AM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:25 PM UTC