zot | Snyk

Direct Vulnerabilities

Known vulnerabilities in the zot package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-xmrv-pmrh-hhx2	<2.1.16-r0
L Uncontrolled Memory Allocation	<2.1.16-r0
L Improper Certificate Validation	<2.1.16-r0
L GHSA-xm5m-wgh2-rrg3	<2.1.16-r0
L GHSA-w8rr-5gcm-pp58	<2.1.16-r0
L GHSA-3xc5-wrhm-f963	<2.1.15-r13
L GHSA-6jwv-w5xf-7j27	<2.1.15-r12
L CVE-2026-33817	<2.1.15-r12
L GHSA-hr2v-4r36-88hr	<2.1.15-r12
M Directory Traversal	<2.1.15-r12
L CVE-2026-4660	<2.1.15-r12
L GHSA-92mm-2pjq-r785	<2.1.15-r12
H Incorrect Authorization	<2.1.15-r12
L GHSA-m4pr-4j3g-9v7v	<2.1.15-r12
L GHSA-7mr4-xjxg-34g6	<2.1.15-r12
L CVE-2026-32280	<2.1.15-r12
M Link Following	<2.1.15-r12
H Allocation of Resources Without Limits or Throttling	<2.1.15-r12
L GHSA-jrg3-gfjw-hm96	<2.1.15-r12
H Improper Certificate Validation	<2.1.15-r12
L GHSA-x4jj-h2v8-hqqv	<2.1.15-r12
M Cross-site Scripting (XSS)	<2.1.15-r12
L GHSA-xj38-jxc5-rppx	<2.1.15-r12
M Allocation of Resources Without Limits or Throttling	<2.1.15-r12
L GHSA-5w89-2c2x-6x66	<2.1.15-r12
L GHSA-gjvh-7jh8-7xhm	<2.1.15-r12
H Untrusted Search Path	<2.1.15-r9
L GHSA-hfvc-g4fc-pqhx	<2.1.15-r9
L GHSA-3p65-76g6-3w7r	<2.1.15-r8
L Improper Access Control	<2.1.15-r8
L Server-Side Request Forgery (SSRF)	<2.1.15-r8
L GHSA-f2g3-hh2r-cwgc	<2.1.15-r8
L Uncaught Exception	<2.1.15-r7
L GHSA-78h2-9frx-2jm8	<2.1.15-r7
L Improper Validation of Array Index	<2.1.15-r6
L GHSA-jhf3-xxhw-2wpp	<2.1.15-r6
L GHSA-gm2x-2g9h-ccm8	<2.1.15-r6
L Integer Underflow	<2.1.15-r6
H Directory Traversal	<2.1.15-r4
L GHSA-4c29-8rgm-jvjj	<2.1.15-r4
L GHSA-4vrq-3vrq-g6gg	<2.1.15-r4
C Directory Traversal	<2.1.15-r4
L Improper Authorization	<2.1.15-r2
L GHSA-p77j-4mvh-x3m3	<2.1.15-r2
L CVE-2026-27141	<2.1.15-r1
L GHSA-8fj7-8h3w-xwfm	<2.1.15-r1
H CVE-2025-15558	<2.1.14-r6
L GHSA-p436-gjf2-799p	<2.1.14-r6
L GHSA-jc7w-c686-c4v9	<2.1.7-r4
L Race Condition	<2.1.7-r1
L GHSA-x4rx-4gw3-53p4	<2.1.6-r1
H Incorrect Privilege Assignment	<2.1.3-r0
L Stack-based Buffer Overflow	<2.1.2-r10
L Allocation of Resources Without Limits or Throttling	<2.1.2-r10
L CVE-2025-47910	<2.1.8-r1
L GHSA-9h84-qmv7-982p	<2.1.7-r2
L Allocation of Resources Without Limits or Throttling	<2.1.2-r3
M Improper Validation of Integrity Check Value	<2.1.14-r3
L Allocation of Resources Without Limits or Throttling	<2.1.7-r4
L GHSA-m6hq-p25p-ffr2	<2.1.10-r1
L Server-Side Request Forgery (SSRF)	<2.1.14-r0
M Directory Traversal	<2.1.14-r0
L Untrusted Search Path	<2.1.14-r5
L GHSA-c9p4-xwr9-rfhx	<2.1.2-r0
L GHSA-mh63-6h87-95cp	<2.1.10-r0
L GHSA-jqc5-w2xx-5vq4	<2.1.14-r0
L Resource Exhaustion	<2.1.1-r8
L GHSA-wjrx-6529-hcj3	<2.1.7-r3
L GHSA-8jvr-vh7g-f8gx	<2.1.14-r2
L GHSA-c6gw-w398-hv78	<2.1.2-r3
L GHSA-j7vj-rw65-4v26	<2.1.1-r1
L GHSA-v725-9546-7q7m	<2.1.1-r8
L GHSA-3whm-j4xm-rv8x	<2.1.2-r1
L GHSA-j5pm-7495-qmr3	<2.1.7-r1
L GHSA-phw4-mc57-4hwc	<2.1.2-r2
L GHSA-crqm-pwhx-j97f	<2.1.1-r1
L GHSA-8xfx-rj4p-23jm	<2.1.1-r1
L GHSA-846p-jg2w-w324	<2.1.14-r0
L GHSA-4c4x-jm2x-pf9j	<2.1.14-r0
L CVE-2025-22868	<2.1.2-r4
L GHSA-fphv-w9fq-2525	<2.1.14-r0
L CVE-2025-22871	<2.1.2-r9
M Insufficient Verification of Data Authenticity	<2.1.14-r0
L GHSA-q9hv-hpm4-hj6x	<2.1.14-r4
L GHSA-w32m-9786-jp63	<2.1.1-r7
L Arbitrary Argument Injection	<2.1.1-r8
M Missing Initialization of Resource	<2.1.6-r1
C CVE-2026-1229	<2.1.14-r4
H Arbitrary Code Injection	<2.1.5-r1
L GHSA-8pjc-487g-w6p2	<2.1.8-r1
L CVE-2024-45337	<2.1.1-r6
L NULL Pointer Dereference	<2.1.14-r0
L GHSA-37cx-329c-33x3	<2.1.14-r3
L Directory Traversal	<2.1.14-r0
L GHSA-6v2p-p543-phr9	<2.1.2-r4
L GHSA-c77r-fh37-x2px	<2.1.1-r2
L GHSA-r9px-m959-cxf4	<2.1.1-r8
L GHSA-29wx-vh33-7x7r	<2.1.1-r5
H Improper Verification of Cryptographic Signature	<2.1.2-r7
L GHSA-265r-hfxg-fhmg	<2.1.2-r7
L CVE-2025-22869	<2.1.2-r5
H Improper Verification of Cryptographic Signature	<2.1.14-r0
L GHSA-xhg5-42rf-296r	<2.1.2-r7
M Improper Privilege Management	<2.1.2-r0
L GHSA-qxp5-gwg8-xv66	<2.1.2-r6
L GHSA-87x9-7grx-m28v	<2.1.2-r7
L Race Condition	<2.1.1-r3
L GHSA-pwhc-rpq9-4c8w	<2.1.10-r1
L CVE-2025-22866	<2.1.2-r1
H Authentication Bypass	<2.1.1-r2
H Incorrect Execution-Assigned Permissions	<2.1.10-r1
L Improper Handling of Exceptional Conditions	<2.1.1-r5
H Reachable Assertion	<2.1.14-r0
L GHSA-4f8r-qqr9-fq8j	<2.1.1-r3
L GHSA-5xqw-8hwv-wg92	<2.1.2-r10
L CVE-2024-34156	<2.1.1-r1
H Allocation of Resources Without Limits or Throttling	<2.1.2-r7
L GHSA-cgrx-mc8f-2prm	<2.1.10-r1
H Symlink Following	<2.1.10-r1
L GHSA-9h8m-3fm2-qjrq	<2.1.14-r5
L Allocation of Resources Without Limits or Throttling	<2.1.7-r2
L CVE-2025-22872	<2.1.2-r11
L GHSA-33c5-9fx5-fvjm	<2.1.2-r7
L Use of Uninitialized Resource	<2.1.7-r2
L GHSA-4hfp-h4cw-hj8p	<2.1.2-r10
L GHSA-4qg8-fj49-pxjh	<2.1.14-r0
H Integer Overflow or Wraparound	<2.1.2-r7
L GHSA-whqx-f9j3-ch6m	<2.1.14-r0
L CVE-2024-45338	<2.1.1-r7
L CVE-2024-34158	<2.1.1-r1
L GHSA-v778-237x-gjrc	<2.1.1-r6
L GHSA-fcv2-xgw5-pqxf	<2.1.14-r0
L CVE-2024-34155	<2.1.1-r1
L GHSA-273p-m2cw-6833	<2.1.14-r0
L CVE-2025-8959	<2.1.7-r3
L GHSA-cxfp-7pvr-95ff	<2.1.3-r0
L GHSA-557j-xg8c-q2mm	<2.1.5-r1
L Authorization Bypass Through User-Controlled Key	<2.1.2-r2
C CVE-2025-68121	<2.1.14-r2
L GHSA-g9pc-8g42-g6vq	<2.1.2-r9
M Memory Leak	<2.1.10-r1
L CVE-2025-61732	<2.1.14-r2
L Asymmetric Resource Consumption (Amplification)	<2.1.14-r0
L CVE-2025-22870	<2.1.2-r6
L GHSA-h355-32pf-p2xm	<2.1.14-r2
L Asymmetric Resource Consumption (Amplification)	<2.1.10-r0
L GHSA-vvgc-356p-c3xw	<2.1.2-r11
L GHSA-mc76-5925-c5p6	<2.1.1-r3
M Open Redirect	<2.1.2-r7
L GHSA-f9f8-9pmf-xv68	<2.1.7-r2
H Link Following	<2.1.1-r3
L GHSA-hcg3-q754-cr77	<2.1.2-r5
L CVE-2024-41110	<2.1.0-r2
L CVE-2024-24791	<2.0.4-r10
L CVE-2024-37298	<2.0.4-r9
H CVE-2024-6257	<2.0.4-r8
M Information Exposure Through Log Files	<2.0.4-r7
L CVE-2023-49559	<2.0.4-r6
M Race Condition	<2.0.4-r5
L CVE-2024-35192	<2.0.4-r4
L Improper Validation of Integrity Check Value	<2.0.4-r2
L CVE-2024-24787	<2.0.4-r1
L CVE-2024-24788	<2.0.4-r1
L CVE-2024-3817	<2.0.4-r0
L CVE-2023-45288	<2.0.3-r4
M Allocation of Resources Without Limits or Throttling	<2.0.3-r3
H Allocation of Resources Without Limits or Throttling	<2.0.3-r3
H Incorrect Resource Transfer Between Spheres	<2.0.3-r0
H Origin Validation Error	<2.0.2-r0
L CVE-2024-24786	<2.0.2-r0
L CVE-2024-28180	<2.1.10-r0
L GHSA-c5q2-7r4c-mv6g	<2.1.10-r0
H Use of Uninitialized Resource	<2.0.1-r5
M Directory Traversal	<2.0.1-r3
C Incorrect Authorization	<2.0.1-r2
H Exposure of Resource to Wrong Sphere	<2.0.1-r2
H Race Condition	<2.0.1-r2
M Improper Check for Unusual or Exceptional Conditions	<2.0.1-r2
C Directory Traversal	<2.0.1-r2
H CVE-2023-49568	<2.0.0-r1
M Improper Validation of Integrity Check Value	<2.0.0-r1
M Cross-site Scripting (XSS)	<1.4.3-r9
H Allocation of Resources Without Limits or Throttling	<1.4.3-r9

Vulnerability

Vulnerable Version

GHSA-xmrv-pmrh-hhx2

<2.1.16-r0