medium4.3
CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
Impact
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | before 7.146.35 from 7.161.0 before 7.161.16 |