github.com/notaryproject/notation vulnerabilities

CVEs whose affected-version data names the github.com/notaryproject/notation package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-23332Medium· 4.0

2y ago

Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from co…

Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry

▾ Sunlitnotaryproject · github.com/notaryproject/notationEPSS 0.29%via OSV