CVE-2025-24882 — regclient may ignore pinned manifest digests
regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in…
Published: 2025-01-29 · CVSS: 5.2 · CVSS 3.1
regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7