CVE-2025-48374

Description

zot logs secrets in zotregistry.dev/zot

Affected packages (2)

• Go/zotregistry.dev/zotfrom 0, < 1.4.4-0.20250522160828-8a99a3ed231f
• Go/zotregistry.dev/zotfrom 0, < 1.4.4-0.20250522160828-8a99a3ed231f

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-48374
• PATCHhttps://github.com/project-zot/zot
• WEBhttps://github.com/project-zot/zot/commit/8a99a3ed231fdcd8467e986182b4705342b6a15e
• WEBhttps://github.com/project-zot/zot/security/advisories/GHSA-c37v-3c8w-crq8
• WEBhttps://pkg.go.dev/vuln/GO-2025-3705