github.com/notaryproject/notation vulnerabilities (Go)

3 vulnerabilities.

• github.com/notaryproject/notation Go Client configured with permissive trust policies susceptible to rollback attack in Notary Project CVE-2024-23332 4.0 MediumJanuary 19, 2024
• github.com/notaryproject/notation Go Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation CVE-2023-33958 Fix available 5.4 MediumJune 6, 2023
• github.com/notaryproject/notation Go Denial of service from high number of artifact signatures in notation CVE-2023-33957 Fix available 2.6 LowJune 6, 2023