Notaryproject
Notaryproject Notation-go: vulnerabilidades y CVE
Notaryproject Notation-go tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-56138 | Media (4) | 0.13% | — | 13 ene 2025 | notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the… |
| CVE-2024-51491 | Baja (3.3) | 0.19% | — | 13 ene 2025 | notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List… |
| CVE-2024-23332 | Media (6.8) | 0.29% | — | 19 ene 2024 | The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor… |
| CVE-2023-33959 | Alta (8.8) | 0.35% | — | 6 jun 2023 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release… |
| CVE-2023-33958 | Media (6.5) | 0.48% | — | 6 jun 2023 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on… |
| CVE-2023-33957 | Media (5.7) | 0.51% | — | 6 jun 2023 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on… |
| CVE-2023-25656 | Alta (7.5) | 0.44% | — | 20 feb 2023 | notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when… |