policy-controller vulnerabilities

1 known vulnerability in policy-controller from Sigstore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  policy-controller: Improper Verification of Cryptographic Signature

  CVE-2022-35930Aug 4, 2022Sigstore

  PolicyController is a utility used to enforce supply chain policy in Kubernetes clusters. In versions prior to 0.2.1 PolicyController will report a false positive, resulting in an admission when it should not be admitted when there is at least one attestation