NetSight
IP …
high8.3

CVE-2024-3727

github.com/containers/image allows unexpected authenticated registry accesses

Impact

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Affected packages

EcosystemPackageAffectedFixed in
gogithub.com/containers/image< 5.30.15.30.1
gogithub.com/containers/image/v5>= 5.30.0, < 5.30.15.30.1

Weakness classification

CWE-354

References