cosign vulnerabilities (Ubuntu)
3 vulnerabilities.
-
cosignUbuntu Cosign's verify-blob-attestation reports false positive when payload parsing fails 4.3 Medium -
cosignUbuntu Cosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked 3.7 Low -
cosignUbuntu Cosign verification accepts any valid Rekor entry under certain conditions 5.5 Medium