Skip to content
OpenAdvisories

Package · Go

github.com/anchore/quill

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-31961

    Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

    Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O…

    Anchore quill github.com/anchore/quill Go
  • Medium 5.3
    CVE-2026-31960

    DoS in Quill via unbounded read of HTTP response body during notarization

    Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP response bodies during the Apple notarization process. Exploitation requires the ability to modify API responses from Apple's …

    Anchore quill github.com/anchore/quill Go
  • Medium 5.3
    CVE-2026-31959

    SSRF in Quill via unvalidated URL from Apple notarization log retrieval

    Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forgery (SSRF) vulnerability when attempting to fetch the Apple notarization submission logs. Exploitation requires the abi…

    Anchore quill github.com/anchore/quill Go