<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 03:54:44 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-3727 — Containers/image: digest type does not guarantee valid type</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-3727</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; image, Red Hat OADP-1.3-RHEL-9, Red Hat Advanced Cluster Security 4.4, Red Hat Advanced Cluster Security 4.5, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Migration Toolkit for Containers 1.8, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15 and 22 more&lt;/p&gt;
&lt;p&gt;A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; image, Red Hat OADP-1.3-RHEL-9, Red Hat Advanced Cluster Security 4.4, Red Hat Advanced Cluster Security 4.5, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Migration Toolkit for Containers 1.8, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15 and 22 more&lt;/p&gt;
&lt;p&gt;A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-3727</guid>
    </item>
  </channel>
</rss>
