News

Application security news, updated daily (if there is any news to share).

Pull-through cache bug leaks upstream registry credentials

CVE-2026-33540 reports a High-severity credential exfiltration risk in `distribution` pull-through cache mode, where attacker-controlled `WWW-Authenticate` `realm` redirects basic-auth credentials.

NewsContainer SecurityDevSecOps

2 minYesterday

Loading news…

Content is AI-assisted and reviewed by our team, but issues may be missed and best practices evolve rapidly, send corrections to [email protected]. Always consult official documentation and validate key implementation decisions before making design or security choices.