Skip to content
OpenAdvisories

Product · notaryproject

notation

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-33958

    Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation

    notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation verif…

    notaryproject notation github.com/notaryproject/notation Go