All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-66380
MEDIUMpublished 2026-08-12 15:18 UTC · 12 hours ago · modified 2026-08-12 18:18 UTC
4.3
CVSS / 10
// description
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
// weaknesses (CWE)
- CWE-862