Skip to content

Update distribrution/distribution dependency from v3.0 to v3.1.1 to fix CVE-2026-35172, CVE-2026-33540, CVE-2026-41888 #2281

Open
Open
Update distribrution/distribution dependency from v3.0 to v3.1.1 to fix CVE-2026-35172, CVE-2026-33540, CVE-2026-41888#2281

Description

@efussi
efussi
opened on Jun 8, 2026

See https://github.com/distribution/distribution/releases/tag/v3.1.0
and https://github.com/distribution/distribution/releases/tag/v3.1.1

Can the dependency please be updated to fix the listed CVEs?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions