TL;DR

To prevent the SSRF vulnerability, ensure that the skipVerify map in PullModel handles duplicate digests correctly, preventing overwrite of the false value set during layer download.

Guidance

• Review the PullModel implementation to identify why the skipVerify map overwrites the false value with true when encountering duplicate digests.
• Modify the skipVerify map to store a list or set of digests instead of a single boolean value to handle duplicate digests correctly.
• Verify that the fix prevents the SSRF vulnerability by testing with a manifest containing duplicate digests and checking that hash verification is not skipped for both entries.
• Consider adding additional logging or monitoring to detect potential SSRF attacks.

Example

No code snippet is provided as the issue does not contain sufficient implementation details.

Notes

The provided information suggests a specific vulnerability in the PullModel implementation, but the exact fix may depend on the underlying code and requirements.

Recommendation

Apply a workaround to modify the PullModel implementation to correctly handle duplicate digests, as upgrading to a fixed version is not mentioned in the issue.

FAIL-SAFE

No additional information is required to provide the above guidance, but further details on the PullModel implementation may be necessary to implement a complete fix.