IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-05-22 21:15

MODIFIED

2025-05-23 15:54

EPSS (Prob. Exploit)

0.18%

Top 92.7%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-01

> DESCRIPTION

zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example at container startup. Version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f) fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-c37v-3c8w-crq8 MODERATE

zot logs secrets

AFFECTED PACKAGES:

GO / zotregistry.dev/zot

< 1.4.4-0.20250522160828-8a99a3ed231f

Fixed in: 1.4.4-0.20250522160828-8a99a3ed231f

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

zot logs secrets

AFFECTED PACKAGES:

Unknown / Unknown

117 versions affected

ALIASES:

GHSA-c37v-3c8w-crq8, GO-2025-3705

> HISTORIQUE DES MODIFICATIONS

Première apparition

22/05/2025 21:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 15:04

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui