CVE-2026-93317

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An unauthenticated attacker who controls a registry or OCI-layout blob source can provide blob contents that do not match the claimed digest. This allows a snapshot to be cached under the incorrect digest and subsequently reused by a later victim build, which compromises the integrity of the build-input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.