github.com/anchore/quill vulnerabilities (Go)

3 vulnerabilities.

• github.com/anchore/quill Go DoS in Quill via unbounded read of HTTP response body during notarization CVE-2026-31960 Fix available 5.3 MediumMarch 11, 2026
• github.com/anchore/quill Go Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing CVE-2026-31961 Fix available 5.5 MediumMarch 11, 2026
• github.com/anchore/quill Go SSRF in Quill via unvalidated URL from Apple notarization log retrieval CVE-2026-31959 Fix available 5.3 MediumMarch 11, 2026