CVE-2025-48374

Name of the Vulnerable Software and Affected Versions zot versions prior to 2.1.3

Description The issue concerns the exposure of the Keycloak client secret in the container stdout logs at startup when using Keycloak as an OIDC provider. This occurs due to a flaw in handling sensitive information.

Recommendations For versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the container logs to minimize the risk of exploitation.