https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:53:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-212611 EUVD-2026-212611 https://cve.radiocsirt.org/vuln/euvd-2026-212611 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24882 <p>regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.</p> <p>regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24882 https://cve.radiocsirt.org/vuln/ghsa-qv35-3gw6-8q4j <p><strong>Affected:</strong> Go: github.com/regclient/regclient</p> <p>### Impact A malicious registry could return a different digest for a pinned manifest without detection.</p> <p>### Patches This has been fixed in the v0.7.1 release.</p> <p>### Workarounds After running a `regclient.ManifestGet`, the returned digest can be compared to the requested digest.</p> <p><strong>Affected:</strong> Go: github.com/regclient/regclient</p> <p>### Impact A malicious registry could return a different digest for a pinned manifest without detection.</p> <p>### Patches This has been fixed in the v0.7.1 release.</p> <p>### Workarounds After running a `regclient.ManifestGet`, the returned digest can be compared to the requested digest.</p> https://cve.radiocsirt.org/vuln/ghsa-qv35-3gw6-8q4j