Distribution Project Distribution vulnerabilities

1 known vulnerability affecting distribution_project/distribution.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2026-33540HIGHCVSS 7.5fixed in 3.1.02026-04-06

CVE-2026-33540 [HIGH] CWE-918 CVE-2026-33540: Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pu Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull-through cache mode, distribution discovers token auth endpoints by parsing WWW-Authenticate challenges returned by the configured upstream registry. The realm URL from a bearer challenge is used without validating that it matches the upstream registr