mirror-registry
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-3528 | < 2 | Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry | HIGH 8.2 | 0.2 % | ||
| CVE-2024-3625 | | Mirror-registry: redis password stored in plain-text | HIGH 7.3 | 0.3 % | ||
| CVE-2024-3624 | | Mirror-registry: database user and password stored in plain-text | HIGH 7.3 | 0.3 % | ||
| CVE-2024-3623 | | Mirror-registry: default database secret key stored in plain-text on initial configuration file | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-3622 | | Mirror-registry: plain-text default csrf secret key | HIGH 8.8 | 0.5 % |