### Impact
In the OCI Image Specification version 1.0.1 and prior, manifest and index documents are not self-describing and documents with a single digest could be interpreted as either a manifest or an index.
### Patches
The Image Specification will be updated to recommend that both manifest and index documents contain a mediaType field to identify the type of document.
See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.
Sign in