Approved changes feed: RSS · Atom
cpe:2.3:a:regclient:regclient:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Regclient (eb679b56-4028-5bb5-84ee-457f1392801e) |
|---|---|
| Product | Regclient (e7542f60-6735-50d3-bfb2-c1cd6c8e8835) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/regclient/regclient |
purl2cpe | 2026-09-09 08:34:03.689253 |
pkg:golang/github.com/regclient/regclient |
purl2cpe | 2026-09-09 08:34:03.689254 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-49349 |
vulnerable | 2026-09-16 04:32:56.062859 |
regclient may leak authentication credentials to external blob stores
MEDIUM (6.8)
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs for foreign blobs. Version 0.11.5 fixes the issue.
Published: 2026-08-12T14:11:58.456Z
Updated: 2026-08-12T14:35:58.638Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24882 |
vulnerable | 2026-06-08 07:12:50.121464 |
regclient may ignore pinned manifest digests
MEDIUM (5.2)
regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.
Published: 2025-01-29T17:40:07.496Z
Updated: 2025-01-29T17:52:45.827Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.