cosign vulnerabilities (Alpine)
6 vulnerabilities.
-
cosignAlpine Cosign's verify-blob-attestation reports false positive when payload parsing fails 4.3 Medium -
cosignAlpine Cosign verification accepts any valid Rekor entry under certain conditions 5.5 Medium -
cosignAlpine Possible endless data attack from attacker-controlled registry in cosign 3.1 Low -
cosignAlpine Vulnerabilities with blob verification in sigstore cosign 5.5 Medium -
cosignAlpine False positive signature verification in cosign 7.1 High -
cosignAlpine Improper Certificate Validation in Cosign 3.3 Low