Skip to content
OpenAdvisories

Vendor

notaryproject

7 known vulnerabilities.

Products

notation-go 4 notation 2 specifications 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2024-51491

    Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go

    notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List (CRL) based revocation check feature. Af…

    notaryproject notation-go github.com/notaryproject/notation-go golang-github-notaryproject-notation-go Ubuntu Go
  • Low 2.6
    CVE-2023-33957

    Denial of service from high number of artifact signatures in notation

    notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation inspe…

    notaryproject notation github.com/notaryproject/notation Go