—
GO-2021-0072
Uncontrolled resource allocation in github.com/docker/distribution
Quick fix
GO-2021-0072 — github.com/docker/distribution: upgrade to the fixed version with the command below.
go get github.com/docker/distribution@v2.7.0-rc.0+incompatibleDetails
Various storage methods do not impose limits on how much content is accepted from user requests, allowing a malicious user to force the caller to allocate an arbitrary amount of memory.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/docker/distribution
Introduced in:
0Fixed in: 2.7.0-rc.0+incompatibleFix
go get github.com/docker/distribution@v2.7.0-rc.0+incompatible