Security Advisories

CVE-2024-3727

Published

Last updated

https://nvd.nist.gov/vuln/detail/CVE-2024-3727

Severity

8.3

High

CVSS V3

Summary

github.com/containers/image allows unexpected authenticated registry accesses

Description

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2024-3727

Severity

Summary

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources