Skip to content
OpenAdvisories

Package · Go

github.com/sigstore/policy-controller

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2022-35930

    Ability to bypass attestation verification in sigstore PolicyController

    PolicyController is a utility used to enforce supply chain policy in Kubernetes clusters. In versions prior to 0.2.1 PolicyController will report a false positive, resulting in an admission when it should not be admitted when there is at least one attestation…

    sigstore policy-controller github.com/sigstore/policy-controller Go