Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:43:23 +0000 CVE-2026-41888 — Distribution: Tag deletion bypasses `storage.delete.enabled` configuration https://vulnerability.circl.lu/vuln/cve-2026-41888 <p><strong>Affected:</strong> distribution</p> <p>Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/&lt;name&gt;/manifests/&lt;tag&gt; endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.</p> <p><strong>Affected:</strong> distribution</p> <p>Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/&lt;name&gt;/manifests/&lt;tag&gt; endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.</p> https://vulnerability.circl.lu/vuln/cve-2026-41888