All issues

Search results

SSRF guards bypassed by non-canonical IP literals the dialer accepts but net.ParseIP rejects (all four guard sites)

Status: Open.

#2425 In google/go-containerregistry;

· shaggyinsomniac opened on Aug 26, 2026

crane validate fails on indexes with BuildKit attestation manifests (empty OCI config)

Status: Open.

#2409 In google/go-containerregistry;

· RogerHYang opened on Aug 14, 2026

ECR e2e tests nonfunctional

github_actionsPull requests that update Github_actions codePull requests that update Github_actions code

Status: Open.

#2387 In google/go-containerregistry;

· Subserial opened on Jul 31, 2026

crane: allow empty label values

bugSomething isn't workingSomething isn't working

Status: Open.

#2376 In google/go-containerregistry;

· elmuerte opened on Jul 22, 2026

Security vulnereability report

Status: Open.

#2355 In google/go-containerregistry;

· kimdu0 opened on Jun 24, 2026

Security: Missing CheckRedirect (SSRF protection) in writer's http.Client

Status: Open.

#2352 In google/go-containerregistry;

· politas180 opened on Jun 23, 2026

🚨 Security Vulnerability Report

Status: Open.

#2346 In google/go-containerregistry;

· JLLeitschuh opened on Jun 15, 2026

crane: pull hangs on certain images on 0.21.6

bugSomething isn't workingSomething isn't working

Status: Open.

#2345 In google/go-containerregistry;

· briankurilko opened on Jun 12, 2026

crane: pull hangs (container v0.21.6)

bugSomething isn't workingSomething isn't working

Status: Open.

#2341 In google/go-containerregistry;

· lqb opened on Jun 9, 2026

ggcr:

bugSomething isn't workingSomething isn't working

Status: Open.

#2339 In google/go-containerregistry;

· jabrown85 opened on Jun 8, 2026

lack of testing?

lifecycle/stale

Status: Open.

#2252 In google/go-containerregistry;

· nvsmirnov opened on Apr 3, 2026

krane/gcrane: Add --impersonate-service-account flag

lifecycle/stale

Status: Open.

#2222 In google/go-containerregistry;

· Elara6331 opened on Feb 27, 2026