Product · notaryproject

notation-go

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.0

CVE-2024-56138

Timestamp signature generation lacks certificate revocation check in notion-go

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the timestamp signature generation, the revocation…

notaryproject notation-go github.com/notaryproject/notation-go golang-github-notaryproject-notation Debian Ubuntu Go

Jan 13, 2025