https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:54:43.889185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212611 EUVD-2026-212611 2026-10-07T03:54:43.891378+00:00 EUVD-2026-212611 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24882 fkie_cve-2025-24882 2026-10-07T03:54:43.891409+00:00

regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.

 https://cve.radiocsirt.org/vuln/ghsa-qv35-3gw6-8q4j GHSA-qv35-3gw6-8q4j — In regclient, pinned manifest digests may be ignored 2026-10-07T03:54:43.891439+00:00

Affected: Go: github.com/regclient/regclient

### Impact A malicious registry could return a different digest for a pinned manifest without detection.

### Patches This has been fixed in the v0.7.1 release.

### Workarounds After running a `regclient.ManifestGet`, the returned digest can be compared to the requested digest.