Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions

发生了什么

On September 30, 2026, security researchers reported a vulnerability in Docker Hub’s identity and access management through our Vulnerability Disclosure Program. We confirmed the report and deployed a fix to production the same afternoon, less than four hours after receiving it. We then reviewed every account conversion back to the date the flaw was introduced, and on October 2, notified every user and organization…

摘要按规则整理自下方来源原文

来源