MEDIUM 6.8 NVD

CVE-2026-49349

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prer

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs for foreign blobs. Version 0.11.5 fixes the issue.

References

https://github.com/regclient/regclient/security/advisories/GHSA-qvqc-4c52-x6qp

Published: 2026-08-12 · Source: NVD · Feed updated: 2026-08-12

This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-08-12 via NVD.

vulnfeed aggregates 10467 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.