[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-35172":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T02:55:33.997Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":855,"aliases":865,"duplicate_of":9,"upstream":867,"downstream":868,"duplicates":875,"related":876,"reserved_at":9,"published_at":880,"modified_at":881,"state":882,"summary":883,"references_raw":891,"kevs":916,"epss":917,"epss_history":920,"metrics":1103,"affected":1113},"CVE-2026-35172","Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared digest descriptor but leaves stale repo-scoped membership behind, so a later Stat or Get from repo b repopulates the shared descriptor and makes the deleted blob readable from repo a again. This vulnerability is fixed in 3.1.0.",null,[11,848],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","weakness","Incomplete","Pillar",[19,106,110,160,173,177,181,185,189,232,271,381,398,501,521,525,685],{"id":20,"name":21,"techniques":22},"CAPEC-19","Embedding Scripts within Scripts",[23,34,99],{"id":24,"name":25,"tactics":26,"countermeasures":33},"T1027.009","Embedded Payloads",[27,30],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",[],{"id":35,"name":36,"tactics":37,"countermeasures":44},"T1546.004","Unix Shell Configuration Modification",[38,41],{"id":39,"name":40},"TA0111","Privilege Escalation",{"id":42,"name":43},"TA0110","Persistence",[45,50,54,58,63,68,73,78,83,87,91,95],{"id":46,"name":47,"tactic":48},"D3-FA","File Analysis",{"name":49},"Detect",{"id":51,"name":52,"tactic":53},"D3-FIM","File Integrity Monitoring",{"name":49},{"id":55,"name":56,"tactic":57},"D3-USICA","User Session Init Config Analysis",{"name":49},{"id":59,"name":60,"tactic":61},"D3-FEV","File Eviction",{"name":62},"Evict",{"id":64,"name":65,"tactic":66},"D3-DF","Decoy File",{"name":67},"Deceive",{"id":69,"name":70,"tactic":71},"D3-FE","File Encryption",{"name":72},"Harden",{"id":74,"name":75,"tactic":76},"D3-RF","Restore File",{"name":77},"Restore",{"id":79,"name":80,"tactic":81},"D3-CF","Content Filtering",{"name":82},"Isolate",{"id":84,"name":85,"tactic":86},"D3-LFP","Local File Permissions",{"name":82},{"id":88,"name":89,"tactic":90},"D3-RFAM","Remote File Access Mediation",{"name":82},{"id":92,"name":93,"tactic":94},"D3-CQ","Content Quarantine",{"name":82},{"id":96,"name":97,"tactic":98},"D3-CM","Content Modification",{"name":82},{"id":100,"name":101,"tactics":102,"countermeasures":105},"T1546.016","Installer Packages",[103,104],{"id":39,"name":40},{"id":42,"name":43},[],{"id":107,"name":108,"techniques":109},"CAPEC-441","Malicious Logic Insertion",[],{"id":111,"name":112,"techniques":113},"CAPEC-478","Modification of Windows Service Configuration",[114,141],{"id":115,"name":116,"tactics":117,"countermeasures":125},"T1574.011","Services Registry Permissions Weakness",[118,119,120,121,122],{"id":42,"name":43},{"id":39,"name":40},{"id":28,"name":29},{"id":31,"name":32},{"id":123,"name":124},"TA0104","Execution",[126,131,135,139],{"id":127,"name":128,"tactic":129},"D3-CI","Configuration Inventory",{"name":130},"Model",{"id":132,"name":133,"tactic":134},"D3-SICA","System Init Config Analysis",{"name":49},{"id":136,"name":137,"tactic":138},"D3-RC","Restore Configuration",{"name":77},{"id":92,"name":93,"tactic":140},{"name":82},{"id":142,"name":143,"tactics":144,"countermeasures":147},"T1543.003","Windows Service",[145,146],{"id":42,"name":43},{"id":39,"name":40},[148,152,156],{"id":149,"name":150,"tactic":151},"D3-DI","Data Inventory",{"name":130},{"id":153,"name":154,"tactic":155},"D3-SCP","System Configuration Permissions",{"name":72},{"id":157,"name":158,"tactic":159},"D3-RD","Restore Database",{"name":77},{"id":161,"name":162,"techniques":163},"CAPEC-479","Malicious Root Certificate",[164],{"id":165,"name":166,"tactics":167,"countermeasures":172},"T1553.004","Install Root Certificate",[168,169],{"id":28,"name":29},{"id":170,"name":171},"TA0112","Defense Impairment",[],{"id":174,"name":175,"techniques":176},"CAPEC-502","Intent Spoof",[],{"id":178,"name":179,"techniques":180},"CAPEC-503","WebView Exposure",[],{"id":182,"name":183,"techniques":184},"CAPEC-536","Data Injected During Configuration",[],{"id":186,"name":187,"techniques":188},"CAPEC-546","Incomplete Data Deletion in a Multi-Tenant Environment",[],{"id":190,"name":191,"techniques":192},"CAPEC-550","Install New Service",[193],{"id":194,"name":195,"tactics":196,"countermeasures":199},"T1543","Create or Modify System Process",[197,198],{"id":42,"name":43},{"id":39,"name":40},[200,202,204,206,210,212,214,216,218,220,222,224,226,228,230],{"id":149,"name":150,"tactic":201},{"name":130},{"id":46,"name":47,"tactic":203},{"name":49},{"id":51,"name":52,"tactic":205},{"name":49},{"id":207,"name":208,"tactic":209},"D3-SFA","System File Analysis",{"name":49},{"id":59,"name":60,"tactic":211},{"name":62},{"id":64,"name":65,"tactic":213},{"name":67},{"id":69,"name":70,"tactic":215},{"name":72},{"id":153,"name":154,"tactic":217},{"name":72},{"id":74,"name":75,"tactic":219},{"name":77},{"id":157,"name":158,"tactic":221},{"name":77},{"id":79,"name":80,"tactic":223},{"name":82},{"id":84,"name":85,"tactic":225},{"name":82},{"id":88,"name":89,"tactic":227},{"name":82},{"id":92,"name":93,"tactic":229},{"name":82},{"id":96,"name":97,"tactic":231},{"name":82},{"id":233,"name":234,"techniques":235},"CAPEC-551","Modify Existing Service",[236],{"id":194,"name":195,"tactics":237,"countermeasures":240},[238,239],{"id":42,"name":43},{"id":39,"name":40},[241,243,245,247,249,251,253,255,257,259,261,263,265,267,269],{"id":149,"name":150,"tactic":242},{"name":130},{"id":46,"name":47,"tactic":244},{"name":49},{"id":51,"name":52,"tactic":246},{"name":49},{"id":207,"name":208,"tactic":248},{"name":49},{"id":59,"name":60,"tactic":250},{"name":62},{"id":64,"name":65,"tactic":252},{"name":67},{"id":69,"name":70,"tactic":254},{"name":72},{"id":153,"name":154,"tactic":256},{"name":72},{"id":74,"name":75,"tactic":258},{"name":77},{"id":157,"name":158,"tactic":260},{"name":77},{"id":79,"name":80,"tactic":262},{"name":82},{"id":84,"name":85,"tactic":264},{"name":82},{"id":88,"name":89,"tactic":266},{"name":82},{"id":92,"name":93,"tactic":268},{"name":82},{"id":96,"name":97,"tactic":270},{"name":82},{"id":272,"name":273,"techniques":274},"CAPEC-552","Install Rootkit ",[275,332,352],{"id":276,"name":277,"tactics":278,"countermeasures":281},"T1014","Rootkit",[279,280],{"id":28,"name":29},{"id":31,"name":32},[282,286,290,292,294,298,302,306,308,310,312,316,318,322,324,326,328,330],{"id":283,"name":284,"tactic":285},"D3-SWI","Software Inventory",{"name":130},{"id":287,"name":288,"tactic":289},"D3-AVE","Asset Vulnerability Enumeration",{"name":130},{"id":46,"name":47,"tactic":291},{"name":49},{"id":51,"name":52,"tactic":293},{"name":49},{"id":295,"name":296,"tactic":297},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":49},{"id":299,"name":300,"tactic":301},"D3-FV","Firmware Verification",{"name":49},{"id":303,"name":304,"tactic":305},"D3-FBA","Firmware Behavior Analysis",{"name":49},{"id":59,"name":60,"tactic":307},{"name":62},{"id":64,"name":65,"tactic":309},{"name":67},{"id":69,"name":70,"tactic":311},{"name":72},{"id":313,"name":314,"tactic":315},"D3-SU","Software Update",{"name":72},{"id":74,"name":75,"tactic":317},{"name":77},{"id":319,"name":320,"tactic":321},"D3-RS","Restore Software",{"name":77},{"id":79,"name":80,"tactic":323},{"name":82},{"id":84,"name":85,"tactic":325},{"name":82},{"id":88,"name":89,"tactic":327},{"name":82},{"id":92,"name":93,"tactic":329},{"name":82},{"id":96,"name":97,"tactic":331},{"name":82},{"id":333,"name":334,"tactics":335,"countermeasures":339},"T1542.003","Bootkit",[336,337,338],{"id":28,"name":29},{"id":31,"name":32},{"id":42,"name":43},[340,342,344,346,350],{"id":283,"name":284,"tactic":341},{"name":130},{"id":287,"name":288,"tactic":343},{"name":130},{"id":313,"name":314,"tactic":345},{"name":72},{"id":347,"name":348,"tactic":349},"D3-BA","Bootloader Authentication",{"name":72},{"id":319,"name":320,"tactic":351},{"name":77},{"id":353,"name":354,"tactics":355,"countermeasures":358},"T1547.006","Kernel Modules and Extensions",[356,357],{"id":42,"name":43},{"id":39,"name":40},[359,361,363,365,367,369,371,373,375,377,379],{"id":46,"name":47,"tactic":360},{"name":49},{"id":51,"name":52,"tactic":362},{"name":49},{"id":59,"name":60,"tactic":364},{"name":62},{"id":64,"name":65,"tactic":366},{"name":67},{"id":69,"name":70,"tactic":368},{"name":72},{"id":74,"name":75,"tactic":370},{"name":77},{"id":79,"name":80,"tactic":372},{"name":82},{"id":84,"name":85,"tactic":374},{"name":82},{"id":88,"name":89,"tactic":376},{"name":82},{"id":92,"name":93,"tactic":378},{"name":82},{"id":96,"name":97,"tactic":380},{"name":82},{"id":382,"name":383,"techniques":384},"CAPEC-556","Replace File Extension Handlers",[385],{"id":386,"name":387,"tactics":388,"countermeasures":391},"T1546.001","Change Default File Association",[389,390],{"id":39,"name":40},{"id":42,"name":43},[392,394,396],{"id":127,"name":128,"tactic":393},{"name":130},{"id":136,"name":137,"tactic":395},{"name":77},{"id":92,"name":93,"tactic":397},{"name":82},{"id":399,"name":400,"techniques":401},"CAPEC-558","Replace Trusted Executable",[402,408],{"id":403,"name":404,"tactics":405,"countermeasures":407},"T1505.005","Terminal Services DLL",[406],{"id":42,"name":43},[],{"id":409,"name":410,"tactics":411,"countermeasures":414},"T1546.008","Accessibility Features",[412,413],{"id":39,"name":40},{"id":42,"name":43},[415,417,419,421,425,429,433,437,441,445,449,453,457,461,465,469,471,473,475,477,479,481,483,485,487,489,493,497],{"id":127,"name":128,"tactic":416},{"name":130},{"id":46,"name":47,"tactic":418},{"name":49},{"id":51,"name":52,"tactic":420},{"name":49},{"id":422,"name":423,"tactic":424},"D3-DA","Dynamic Analysis",{"name":49},{"id":426,"name":427,"tactic":428},"D3-EFA","Emulated File Analysis",{"name":49},{"id":430,"name":431,"tactic":432},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":49},{"id":434,"name":435,"tactic":436},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":49},{"id":438,"name":439,"tactic":440},"D3-CSPP","Client-server Payload Profiling",{"name":49},{"id":442,"name":443,"tactic":444},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":49},{"id":446,"name":447,"tactic":448},"D3-NTSA","Network Traffic Signature Analysis",{"name":49},{"id":450,"name":451,"tactic":452},"D3-APCA","Application Protocol Command Analysis",{"name":49},{"id":454,"name":455,"tactic":456},"D3-NTCD","Network Traffic Community Deviation",{"name":49},{"id":458,"name":459,"tactic":460},"D3-RTSD","Remote Terminal Session Detection",{"name":49},{"id":462,"name":463,"tactic":464},"D3-CAA","Connection Attempt Analysis",{"name":49},{"id":466,"name":467,"tactic":468},"D3-ANAA","Administrative Network Activity Analysis",{"name":49},{"id":59,"name":60,"tactic":470},{"name":62},{"id":64,"name":65,"tactic":472},{"name":67},{"id":69,"name":70,"tactic":474},{"name":72},{"id":74,"name":75,"tactic":476},{"name":77},{"id":136,"name":137,"tactic":478},{"name":77},{"id":79,"name":80,"tactic":480},{"name":82},{"id":84,"name":85,"tactic":482},{"name":82},{"id":88,"name":89,"tactic":484},{"name":82},{"id":92,"name":93,"tactic":486},{"name":82},{"id":96,"name":97,"tactic":488},{"name":82},{"id":490,"name":491,"tactic":492},"D3-EAL","Executable Allowlisting",{"name":82},{"id":494,"name":495,"tactic":496},"D3-EDL","Executable Denylisting",{"name":82},{"id":498,"name":499,"tactic":500},"D3-NTF","Network Traffic Filtering",{"name":82},{"id":502,"name":503,"techniques":504},"CAPEC-562","Modify Shared File",[505],{"id":506,"name":507,"tactics":508,"countermeasures":512},"T1080","Taint Shared Content",[509],{"id":510,"name":511},"TA0109","Lateral Movement",[513,517],{"id":514,"name":515,"tactic":516},"D3-DNR","Decoy Network Resource",{"name":67},{"id":518,"name":519,"tactic":520},"D3-NRAM","Network Resource Access Mediation",{"name":82},{"id":522,"name":523,"techniques":524},"CAPEC-563","Add Malicious File to Shared Webroot",[],{"id":526,"name":527,"techniques":528},"CAPEC-564","Run Software at Logon",[529,576,605,634],{"id":530,"name":531,"tactics":532,"countermeasures":535},"T1037","Boot or Logon Initialization Scripts",[533,534],{"id":42,"name":43},{"id":39,"name":40},[536,538,540,542,544,546,548,550,552,554,556,558,560,562,564,566,568,570,572,574],{"id":127,"name":128,"tactic":537},{"name":130},{"id":46,"name":47,"tactic":539},{"name":49},{"id":51,"name":52,"tactic":541},{"name":49},{"id":422,"name":423,"tactic":543},{"name":49},{"id":426,"name":427,"tactic":545},{"name":49},{"id":132,"name":133,"tactic":547},{"name":49},{"id":59,"name":60,"tactic":549},{"name":62},{"id":64,"name":65,"tactic":551},{"name":67},{"id":514,"name":515,"tactic":553},{"name":67},{"id":69,"name":70,"tactic":555},{"name":72},{"id":74,"name":75,"tactic":557},{"name":77},{"id":136,"name":137,"tactic":559},{"name":77},{"id":79,"name":80,"tactic":561},{"name":82},{"id":84,"name":85,"tactic":563},{"name":82},{"id":88,"name":89,"tactic":565},{"name":82},{"id":92,"name":93,"tactic":567},{"name":82},{"id":96,"name":97,"tactic":569},{"name":82},{"id":490,"name":491,"tactic":571},{"name":82},{"id":494,"name":495,"tactic":573},{"name":82},{"id":518,"name":519,"tactic":575},{"name":82},{"id":577,"name":578,"tactics":579,"countermeasures":582},"T1543.001","Launch Agent",[580,581],{"id":42,"name":43},{"id":39,"name":40},[583,585,587,589,591,593,595,597,599,601,603],{"id":46,"name":47,"tactic":584},{"name":49},{"id":51,"name":52,"tactic":586},{"name":49},{"id":59,"name":60,"tactic":588},{"name":62},{"id":64,"name":65,"tactic":590},{"name":67},{"id":69,"name":70,"tactic":592},{"name":72},{"id":74,"name":75,"tactic":594},{"name":77},{"id":79,"name":80,"tactic":596},{"name":82},{"id":84,"name":85,"tactic":598},{"name":82},{"id":88,"name":89,"tactic":600},{"name":82},{"id":92,"name":93,"tactic":602},{"name":82},{"id":96,"name":97,"tactic":604},{"name":82},{"id":606,"name":607,"tactics":608,"countermeasures":611},"T1543.004","Launch Daemon",[609,610],{"id":42,"name":43},{"id":39,"name":40},[612,614,616,618,620,622,624,626,628,630,632],{"id":46,"name":47,"tactic":613},{"name":49},{"id":51,"name":52,"tactic":615},{"name":49},{"id":59,"name":60,"tactic":617},{"name":62},{"id":64,"name":65,"tactic":619},{"name":67},{"id":69,"name":70,"tactic":621},{"name":72},{"id":74,"name":75,"tactic":623},{"name":77},{"id":79,"name":80,"tactic":625},{"name":82},{"id":84,"name":85,"tactic":627},{"name":82},{"id":88,"name":89,"tactic":629},{"name":82},{"id":92,"name":93,"tactic":631},{"name":82},{"id":96,"name":97,"tactic":633},{"name":82},{"id":635,"name":636,"tactics":637,"countermeasures":640},"T1547","Boot or Logon Autostart Execution",[638,639],{"id":42,"name":43},{"id":39,"name":40},[641,643,645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,677,679,681,683],{"id":127,"name":128,"tactic":642},{"name":130},{"id":283,"name":284,"tactic":644},{"name":130},{"id":287,"name":288,"tactic":646},{"name":130},{"id":46,"name":47,"tactic":648},{"name":49},{"id":51,"name":52,"tactic":650},{"name":49},{"id":132,"name":133,"tactic":652},{"name":49},{"id":422,"name":423,"tactic":654},{"name":49},{"id":426,"name":427,"tactic":656},{"name":49},{"id":59,"name":60,"tactic":658},{"name":62},{"id":64,"name":65,"tactic":660},{"name":67},{"id":69,"name":70,"tactic":662},{"name":72},{"id":313,"name":314,"tactic":664},{"name":72},{"id":74,"name":75,"tactic":666},{"name":77},{"id":136,"name":137,"tactic":668},{"name":77},{"id":319,"name":320,"tactic":670},{"name":77},{"id":79,"name":80,"tactic":672},{"name":82},{"id":84,"name":85,"tactic":674},{"name":82},{"id":88,"name":89,"tactic":676},{"name":82},{"id":92,"name":93,"tactic":678},{"name":82},{"id":96,"name":97,"tactic":680},{"name":82},{"id":490,"name":491,"tactic":682},{"name":82},{"id":494,"name":495,"tactic":684},{"name":82},{"id":686,"name":687,"techniques":688},"CAPEC-578","Disable Security Software",[689,748,781,800,811,822,833],{"id":690,"name":691,"tactics":692,"countermeasures":699},"T1556.006","Multi-Factor Authentication",[693,694,695,696],{"id":28,"name":29},{"id":170,"name":171},{"id":42,"name":43},{"id":697,"name":698},"TA0031","Credential Access",[700,704,708,712,716,720,724,728,732,736,740,744],{"id":701,"name":702,"tactic":703},"D3-PLA","Process Lineage Analysis",{"name":49},{"id":705,"name":706,"tactic":707},"D3-PSMD","Process Self-Modification Detection",{"name":49},{"id":709,"name":710,"tactic":711},"D3-PSA","Process Spawn Analysis",{"name":49},{"id":713,"name":714,"tactic":715},"D3-PT","Process Termination",{"name":62},{"id":717,"name":718,"tactic":719},"D3-PS","Process Suspension",{"name":62},{"id":721,"name":722,"tactic":723},"D3-HR","Host Reboot",{"name":62},{"id":725,"name":726,"tactic":727},"D3-HS","Host Shutdown",{"name":62},{"id":729,"name":730,"tactic":731},"D3-KBPI","Kernel-based Process Isolation",{"name":82},{"id":733,"name":734,"tactic":735},"D3-SCF","System Call Filtering",{"name":82},{"id":737,"name":738,"tactic":739},"D3-HBPI","Hardware-based Process Isolation",{"name":82},{"id":741,"name":742,"tactic":743},"D3-ABPI","Application-based Process Isolation",{"name":82},{"id":745,"name":746,"tactic":747},"D3-WSAM","Web Session Access Mediation",{"name":82},{"id":749,"name":750,"tactics":751,"countermeasures":754},"T1562.001","Disable or Modify Tools",[752,753],{"id":28,"name":29},{"id":31,"name":32},[755,757,759,761,765,767,769,771,773,775,777,779],{"id":701,"name":702,"tactic":756},{"name":49},{"id":705,"name":706,"tactic":758},{"name":49},{"id":709,"name":710,"tactic":760},{"name":49},{"id":762,"name":763,"tactic":764},"D3-SDM","System Daemon Monitoring",{"name":49},{"id":713,"name":714,"tactic":766},{"name":62},{"id":717,"name":718,"tactic":768},{"name":62},{"id":721,"name":722,"tactic":770},{"name":62},{"id":725,"name":726,"tactic":772},{"name":62},{"id":729,"name":730,"tactic":774},{"name":82},{"id":733,"name":734,"tactic":776},{"name":82},{"id":737,"name":738,"tactic":778},{"name":82},{"id":741,"name":742,"tactic":780},{"name":82},{"id":782,"name":783,"tactics":784,"countermeasures":787},"T1562.002","Disable Windows Event Logging",[785,786],{"id":28,"name":29},{"id":31,"name":32},[788,790,794,798],{"id":127,"name":128,"tactic":789},{"name":130},{"id":791,"name":792,"tactic":793},"D3-DRA","Disable Remote Access",{"name":72},{"id":795,"name":796,"tactic":797},"D3-ACH","Application Configuration Hardening",{"name":72},{"id":136,"name":137,"tactic":799},{"name":77},{"id":801,"name":802,"tactics":803,"countermeasures":806},"T1562.004","Disable or Modify System Firewall",[804,805],{"id":28,"name":29},{"id":31,"name":32},[807,809],{"id":127,"name":128,"tactic":808},{"name":130},{"id":136,"name":137,"tactic":810},{"name":77},{"id":812,"name":813,"tactics":814,"countermeasures":817},"T1562.007","Disable or Modify Cloud Firewall",[815,816],{"id":28,"name":29},{"id":31,"name":32},[818,820],{"id":127,"name":128,"tactic":819},{"name":130},{"id":136,"name":137,"tactic":821},{"name":77},{"id":823,"name":824,"tactics":825,"countermeasures":828},"T1562.008","Disable or Modify Cloud Logs",[826,827],{"id":28,"name":29},{"id":31,"name":32},[829,831],{"id":127,"name":128,"tactic":830},{"name":130},{"id":136,"name":137,"tactic":832},{"name":77},{"id":834,"name":835,"tactics":836,"countermeasures":839},"T1562.009","Safe Mode Boot",[837,838],{"id":28,"name":29},{"id":31,"name":32},[840,842,844,846],{"id":127,"name":128,"tactic":841},{"name":130},{"id":132,"name":133,"tactic":843},{"name":49},{"id":136,"name":137,"tactic":845},{"name":77},{"id":92,"name":93,"tactic":847},{"name":82},{"_key":849,"id":849,"name":850,"description":851,"type":852,"status":853,"abstraction":9,"likelihood_of_exploit":9,"capec":854},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[856],{"_key":857,"name":858,"source":859,"url":860,"maturity":861,"reliability_score":862,"verified":863,"type":9,"platforms":864,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_DISTRIBUTION_DISTRIBUTION","Distribution","github","https://github.com/distribution/distribution/security/advisories/GHSA-3p65-76g6-3w7r","poc",0.3,false,[],[866],"GHSA-f2g3-hh2r-cwgc",[],[869,871,873],{"_key":870},"DEBIAN-CVE-2026-35172",{"_key":872},"OPENSUSE-SU-2026:10631-1",{"_key":874},"UBUNTU-CVE-2026-35172",[],[877,878],{"_key":872},{"_key":879},"CGA-5R6M-HCWC-JVHP","2026-04-06T19:08:44.512Z","2026-04-07T14:46:34.904Z","Analyzed",{"cisa_kev":863,"cisa_ransomware":863,"cisa_vendor":9,"epss_severity":884,"epss_score":885,"severity":886,"severity_score":887,"severity_version":888,"severity_source":889,"severity_vector":890,"severity_status":882},"low",0.00061,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[892,902,906,911],{"url":893,"sources":894,"tags":897},"https://github.com/distribution/distribution/security/advisories/GHSA-f2g3-hh2r-cwgc",[895,889,896],"osv_go","nvd",[898,899,900,901],"WEB","X Refsource CONFIRM","Exploit","Vendor Advisory",{"url":903,"sources":904,"tags":905},"https://github.com/distribution/distribution/commit/078b0783f239b4115d1a979e66f08832084e9d1d",[895],[898],{"url":907,"sources":908,"tags":909},"https://github.com/distribution/distribution",[895],[910],"PACKAGE",{"url":912,"sources":913,"tags":914},"https://nvd.nist.gov/vuln/detail/CVE-2026-35172",[895],[915],"Advisory",[],{"date":918,"score":885,"percentile":919},"2026-06-05",0.19391,[921,925,928,931,934,937,941,944,947,950,953,956,959,962,965,968,971,974,977,980,983,986,990,993,996,999,1002,1005,1008,1011,1014,1017,1021,1024,1027,1030,1033,1036,1039,1042,1045,1048,1051,1054,1057,1060,1063,1066,1069,1072,1075,1078,1081,1084,1087,1090,1093,1096,1099,1102],{"date":922,"score":923,"percentile":924},"2026-04-07",0.00032,0.09042,{"date":926,"score":923,"percentile":927},"2026-04-08",0.09121,{"date":929,"score":923,"percentile":930},"2026-04-09",0.0915,{"date":932,"score":923,"percentile":933},"2026-04-10",0.09156,{"date":935,"score":923,"percentile":936},"2026-04-11",0.09152,{"date":938,"score":939,"percentile":940},"2026-04-12",0.00042,0.12644,{"date":942,"score":939,"percentile":943},"2026-04-13",0.126,{"date":945,"score":939,"percentile":946},"2026-04-14",0.12471,{"date":948,"score":939,"percentile":949},"2026-04-15",0.12505,{"date":951,"score":939,"percentile":952},"2026-04-16",0.12504,{"date":954,"score":939,"percentile":955},"2026-04-17",0.12508,{"date":957,"score":939,"percentile":958},"2026-04-18",0.12511,{"date":960,"score":939,"percentile":961},"2026-04-19",0.12484,{"date":963,"score":939,"percentile":964},"2026-04-20",0.12464,{"date":966,"score":939,"percentile":967},"2026-04-21",0.12626,{"date":969,"score":939,"percentile":970},"2026-04-22",0.12688,{"date":972,"score":939,"percentile":973},"2026-04-23",0.127,{"date":975,"score":939,"percentile":976},"2026-04-24",0.12635,{"date":978,"score":939,"percentile":979},"2026-04-25",0.1263,{"date":981,"score":939,"percentile":982},"2026-04-26",0.12598,{"date":984,"score":939,"percentile":985},"2026-04-27",0.12573,{"date":987,"score":988,"percentile":989},"2026-04-28",0.00041,0.12469,{"date":991,"score":988,"percentile":992},"2026-04-29",0.12444,{"date":994,"score":988,"percentile":995},"2026-04-30",0.12418,{"date":997,"score":988,"percentile":998},"2026-05-01",0.12391,{"date":1000,"score":988,"percentile":1001},"2026-05-02",0.12422,{"date":1003,"score":988,"percentile":1004},"2026-05-03",0.12405,{"date":1006,"score":988,"percentile":1007},"2026-05-04",0.12359,{"date":1009,"score":988,"percentile":1010},"2026-05-05",0.12356,{"date":1012,"score":988,"percentile":1013},"2026-05-06",0.12345,{"date":1015,"score":988,"percentile":1016},"2026-05-07",0.12496,{"date":1018,"score":1019,"percentile":1020},"2026-05-08",0.00045,0.13777,{"date":1022,"score":1019,"percentile":1023},"2026-05-09",0.1384,{"date":1025,"score":1019,"percentile":1026},"2026-05-10",0.13843,{"date":1028,"score":1019,"percentile":1029},"2026-05-11",0.13836,{"date":1031,"score":1019,"percentile":1032},"2026-05-12",0.13868,{"date":1034,"score":1019,"percentile":1035},"2026-05-13",0.13902,{"date":1037,"score":1019,"percentile":1038},"2026-05-14",0.13961,{"date":1040,"score":1019,"percentile":1041},"2026-05-15",0.13964,{"date":1043,"score":1019,"percentile":1044},"2026-05-16",0.13973,{"date":1046,"score":1019,"percentile":1047},"2026-05-17",0.13965,{"date":1049,"score":885,"percentile":1050},"2026-05-18",0.19053,{"date":1052,"score":885,"percentile":1053},"2026-05-19",0.19045,{"date":1055,"score":885,"percentile":1056},"2026-05-20",0.19054,{"date":1058,"score":885,"percentile":1059},"2026-05-21",0.19036,{"date":1061,"score":885,"percentile":1062},"2026-05-22",0.19142,{"date":1064,"score":885,"percentile":1065},"2026-05-23",0.19137,{"date":1067,"score":885,"percentile":1068},"2026-05-24",0.19081,{"date":1070,"score":885,"percentile":1071},"2026-05-25",0.19064,{"date":1073,"score":885,"percentile":1074},"2026-05-26",0.19058,{"date":1076,"score":885,"percentile":1077},"2026-05-27",0.19141,{"date":1079,"score":885,"percentile":1080},"2026-05-28",0.19281,{"date":1082,"score":885,"percentile":1083},"2026-05-29",0.19343,{"date":1085,"score":885,"percentile":1086},"2026-05-30",0.19339,{"date":1088,"score":885,"percentile":1089},"2026-05-31",0.19328,{"date":1091,"score":885,"percentile":1092},"2026-06-01",0.19312,{"date":1094,"score":885,"percentile":1095},"2026-06-02",0.19308,{"date":1097,"score":885,"percentile":1098},"2026-06-03",0.19309,{"date":1100,"score":885,"percentile":1101},"2026-06-04",0.19319,{"date":918,"score":885,"percentile":919},[1104,1108,1111],{"source":895,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1105,"cvss_v4_0":9},{"baseScore":887,"baseSeverity":9,"vectorString":890,"impactScore":1106,"exploitabilityScore":1107},6,10,{"source":889,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1109,"cvss_v4_0":9},{"baseScore":887,"baseSeverity":1110,"vectorString":890,"impactScore":1106,"exploitabilityScore":1107},"HIGH",{"source":896,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1112,"cvss_v4_0":9},{"baseScore":887,"baseSeverity":1110,"vectorString":890,"impactScore":1106,"exploitabilityScore":1107},[1114,1124,1135],{"ecosystem":9,"name":1115,"vendor":1115,"product":1115,"cpe_part":1116,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1117},"distribution","a",[1118],{"version":1119,"is_range":1120,"range_type":1121,"version_start":9,"version_start_type":9,"version_end":1122,"version_end_type":1123,"fixed_in":9},"lt3.1.0",true,"cpe","3.1.0","excluding",{"ecosystem":1125,"name":1126,"vendor":1127,"product":1115,"cpe_part":9,"purl_type":1128,"purl_namespace":1127,"purl_name":1115,"source":9,"versions":1129},"Go","github.com/distribution/distribution","github.com/distribution","golang",[1130],{"version":1131,"is_range":1120,"range_type":1132,"version_start":9,"version_start_type":9,"version_end":1133,"version_end_type":1134,"fixed_in":9},"lte2_8_3","semver","2.8.3","including",{"ecosystem":1125,"name":1136,"vendor":1126,"product":1137,"cpe_part":9,"purl_type":1128,"purl_namespace":1126,"purl_name":1137,"source":9,"versions":1138},"github.com/distribution/distribution/v3","v3",[1139],{"version":1140,"is_range":1120,"range_type":1132,"version_start":9,"version_start_type":9,"version_end":1122,"version_end_type":1123,"fixed_in":9},"lt3_1_0"]