In-Toto

3 CVEs across 3 In-Toto products. Browse In-Toto vulnerabilities, severities, and proof-of-concept exploits.

In-Toto products with known CVEs

ProductCVEs
Go-Witness1
In-Toto1
In-Toto-Golang1
In-Toto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-623752025-10-15go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS atte…
CVE-2023-32076Medium5.52023-05-10in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior…
CVE-2021-41087Medium5.62021-09-21in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticated attackers posing…