Skip to content
OpenAdvisories

Package · Go

github.com/in-toto/go-witness

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.9
    CVE-2025-62375

    go-witness Improper Verification of AWS EC2 Identity Documents

    go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed w…

    in-toto go-witness tkn tekton-chains Wolfi Go