Skip to content
OpenAdvisories

Package · Go

github.com/notaryproject/notation-go

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2023-33959

    Verification bypass can cause users into verifying the wrong artifact

    notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation-g…

    notaryproject notation-go github.com/notaryproject/notation-go Go
  • High 7.5
    CVE-2023-25656

    notation-go has excessive memory allocation on verification

    notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when verifying signatures. The application will b…

    notaryproject notation-go github.com/notaryproject/notation-go Go