Affected by GO-2025-3460 and 2 other vulnerabilities

GO-2025-3460: Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution

GO-2026-5094: Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm in github.com/distribution/distribution

GO-2026-5185: Distribution's tag deletion bypasses `storage.delete.enabled` configuration in github.com/distribution/distribution

The highest tagged major version is v3.

cachecheck

package

v2.8.3+incompatible Latest Latest Go to latest Published: Oct 2, 2023 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/distribution/distribution

Links

Documentation ¶

Index ¶

func CheckBlobDescriptorCache(t *testing.T, provider cache.BlobDescriptorCacheProvider)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CheckBlobDescriptorCache ¶

func CheckBlobDescriptorCache(t *testing.T, provider cache.BlobDescriptorCacheProvider)

CheckBlobDescriptorCache takes a cache implementation through a common set of operations. If adding new tests, please add them here so new implementations get the benefit. This should be used for unit tests.

Types ¶

This section is empty.

Source Files ¶

View all Source files

suite.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL