—
GO-2026-6527
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion in zotregistry.dev/zot
Quick fix
GO-2026-6527 — zotregistry.dev/zot/v2: upgrade to the fixed version with the command below.
go get zotregistry.dev/zot/v2@v2.1.18Details
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion in zotregistry.dev/zot
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/zotregistry.dev/zot
Introduced in:
0No fixed version published yet for zotregistry.dev/zot (go modules). Pin to a known-safe version or switch to an alternative.