zot has 2 CVEs on record between 2024 and 2026. 1 was published in the last 90 days. The median CVSS is 6.2 (medium).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.2
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- zotregistry.dev/zot/v2 1
- zotregistry.io/zot 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
zot vulnerabilities
CVEs affecting zot, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-61833High· 8.1zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification
zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to th…
▾ Twilightzot · zotregistry.dev/zot/v2EPSS 0.43%via NVD
CVE-2024-39897Medium· 4.3Cache driver GetBlob() allows read access to any blob without access control check
Cache driver GetBlob() allows read access to any blob without access control check
▾ Sunlitzot · zotregistry.io/zotEPSS 0.30%via OSV