In-toto vulnerabilities

Newest

• in-toto go-witness go-witness Improper Verification of AWS EC2 Identity Documents CVE-2025-62375 Fix available 6.9 MediumOctober 15, 2025
• in-toto in-toto vulnerable to Configuration Read From Local Directory CVE-2023-32076 Fix available 5.5 MediumMay 10, 2023
• in-toto in-toto-golang Improperly Implemented path matching for in-toto-golang CVE-2021-41087 Fix available 5.6 MediumSeptember 21, 2021