Notaryproject Notation-go
7 CVEs affecting Notaryproject Notation-go. Latest disclosed: 2025-01-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33959 | High | 8.3 | 2023-06-06 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong ar… |
CVE-2023-25656 | High | 7.5 | 2023-02-20 | notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users… |
CVE-2023-33958 | Medium | 5.4 | 2023-06-06 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures… |
CVE-2024-56138 | Medium | 4.0 | 2025-01-13 | notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Q… |
CVE-2024-23332 | Medium | 4.0 | 2024-01-19 | The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic co… |
CVE-2024-51491 | Low | 3.3 | 2025-01-13 | notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Qu… |
CVE-2023-33957 | Low | 2.6 | 2023-06-06 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures… |