Affected by GO-2024-2979 and 1 other vulnerabilities

GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

GO-2025-3409: Zot IdP group membership revocation ignored in zotregistry.dev/zot

zot

package module

v1.4.4-0...-293f424 Latest Latest Go to latest Published: Apr 23, 2025 License: Apache-2.0 Imports: 0 Imported by: 0

Details

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!

Documentation for zot is located at: https://zotregistry.dev

Code of conduct details are here.

There is no documentation for this package.

Path	Synopsis
cmd
zb
zot
zxp
errors
pkg
api Package ldap provides a simple ldap client to authenticate, retrieve basic information and groups for a user.	Package ldap provides a simple ldap client to authenticate, retrieve basic information and groups for a user.
api/config
api/config/redis
api/constants
api/errors
cli/server
cluster
common
compat
compliance
compliance/v1_0_0
debug/constants
debug/gqlplayground
debug/pprof
debug/swagger
exporter/api
exporter/cli
extensions
extensions/config
extensions/config/sync
extensions/imagetrust
extensions/lint
extensions/monitoring
extensions/search
extensions/search/convert
extensions/search/cve
extensions/search/cve/cache
extensions/search/cve/model
extensions/search/cve/trivy
extensions/search/gql_generated
extensions/search/pagination
extensions/sync
extensions/sync/constants
log
meta
meta/boltdb
meta/common
meta/convert
meta/dynamodb
meta/proto/gen
meta/redis
meta/types
meta/version
regexp
requestcontext
retention
retention/types
scheduler
storage
storage/cache
storage/common
storage/constants
storage/gc
storage/imagestore
storage/local
storage/s3
storage/types
test/auth
test/common
test/image-utils
test/inject
test/mocks
test/oci-utils
test/signature
test/skip
swagger Package swagger Code generated by swaggo/swag.	Package swagger Code generated by swaggo/swag.