Notaryproject vulnerabilities
We track 2 vulnerabilities in Notaryproject products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2023.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Notaryproject vulnerabilities
- 8.8 High severity
notation-go: Improper Verification of Cryptographic Signature
notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation-go
- 7.5 High severity
notation-go: Allocation of Resources Without Limits or Throttling
notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when verifying signatures. The application will be