Skip to content
OpenAdvisories

Product · notaryproject

specifications

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2024-23332

    Client configured with permissive trust policies susceptible to rollback attack in Notary Project

    The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor with control of a compromised container re…

    notaryproject specifications xeol github.com/notaryproject/notation Wolfi Go