Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2025-24882

regclient may ignore pinned manifest digests

Description

regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

regclient regclient

  • < 0.7.1affected

References