| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/docker/distribution | < 2.7.0-rc.0< 2.7.0-rc.0+incompatible | 2.7.0-rc.02.7.0-rc.0+incompatible |
| docker registry | ≤ 2.6.1 |
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
github.com/docker/distribution/registry/storage github.com/docker/distribution/registry/handlers
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free