Affected by GO-2025-3460
and 2 other vulnerabilities
GO-2025-3460: Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution
GO-2026-5094: Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm in github.com/distribution/distribution
GO-2026-5185: Distribution's tag deletion bypasses `storage.delete.enabled` configuration in github.com/distribution/distribution
The highest tagged major version is
v3.
This package is not in the latest version of its module.
Documentation
¶
Package silly provides a simple authentication scheme that checks for the existence of an Authorization header and issues access if is present and non-empty.
This package is present as an example implementation of a minimal auth.AccessController and for testing. This is not suitable for any kind of production security.
Source Files