HOMEVULNERABILITIESVENDORSDistribution

Distribution CVEs & Vulnerabilities

1 CVEs affecting Distribution products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

distribution 1
CVE-2026-41888MEDIUM

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.

14 May 2026
6.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database