Known Vulnerabilities in OCI Distribution Specification