Ikkebr

Trivy improperly trusts the `org.opencontainers.image.title` annotation in an OCI artifact manifest, using it as the destination filename when downloading content without proper validation or sanitization. This path traversal flaw allows an attacker to supply a crafted annotation that resolves to a path outside the intended destination. If Trivy is tricked into fetching an attacker-controlled artifact, it can result in writing layer content to an arbitrary location on the host filesystem, potentially enabling local privilege escalation, persistence, or service disruption.

An authorization bypass exists in the Docker API proxy layer where plugin management endpoints were not registered with a handler. This allows non-admin users with endpoint access to bypass Role-Based Access Control (RBAC) and send privileged requests directly to the Docker daemon. An authenticated user can pull an arbitrary plugin via 'POST /plugins/pull', grant it high privileges such as `CAP SYS ADMIN` and host-path mounts, and enable it via 'POST /plugins/{name}/enable'. Since Docker plugins execute as root on the host, this can lead to a container escape, granting the user root access to the host filesystem.

The issue concerns the `torbot.modules.validators.validate link` function, which uses the python-validators URL validation regex. This regular expression has exponential complexity, allowing an attacker to cause an application crash using a well-crafted argument. An attacker can exploit the vulnerability in the regular expression using a well-crafted URL argument, causing a Denial of Service on the system.