Vulnerabilities in OCI Distribution Specification