Known vulnerabilities in distribution

Software: distribution
Software CPE: cpe:2.3:a:docker:distribution:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting distribution distribution is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129582 - Improper Authorization
CVE-2026-41888
CWE-285 Low
No
No
3.1.1 04.05.2026 SB2026050491
SB2026050501
#VU125341 - Server-Side Request Forgery (SSRF)
CVE-2026-33540
CWE-918 Medium
No
No
3.1.0 08.04.2026 SB2026040898
SB2026050501
#VU125340 - Improper Access Control
CVE-2026-35172
CWE-284 Medium
No
No
3.1.0 08.04.2026 SB2026040898
SB2026050501
SB2026061128
and 1 more
#VU103784 - Insufficient Verification of Data Authenticity
CVE-2025-24976
CWE-345 Medium
No
No
3.0.0 rc.2 11.02.2025 SB2025021194
SB2025031788
SB2025032445
#VU75993 - Resource Management Errors
CVE-2023-2253
CWE-399 Medium
No
No
2.8.2 10.05.2023 SB2023051039
SB2023051040
SB2023051041
and 22 more
#VU65004 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-28391
CWE-78 High
No
No
2.8.2 07.07.2022 SB2022070727
SB2022070729
SB2023051039
and 3 more
#VU58229 - Type confusion
CVE-2021-41190
CWE-843 Low
No
No
2.8.0 beta.1 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more