Skip to content
OpenAdvisories

Package · Debian

in-toto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2023-32076

    in-toto vulnerable to Configuration Read From Local Directory

    in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In…

    in-toto in-toto in-toto in-toto Debian Ubuntu PyPI