Skip to content
Notaryproject Notation vulnerabilities
-
notaryproject notation-go
Timestamp signature generation lacks certificate revocation check in notion-go
CVE-2024-56138
Fix available
4.0 Medium
-
notaryproject notation-go
Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go
CVE-2024-51491
Fix available
3.3 Low
-
notaryproject specifications, notation-go +1 more
Client configured with permissive trust policies susceptible to rollback attack in Notary Project
CVE-2024-23332
4.0 Medium
-
notaryproject notation-go
Verification bypass can cause users into verifying the wrong artifact
CVE-2023-33959
Fix available
8.4 High
-
notaryproject notation, notation-go +1 more
Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation
CVE-2023-33958
Fix available
5.4 Medium
-
notaryproject notation, notation-go +1 more
Denial of service from high number of artifact signatures in notation
CVE-2023-33957
Fix available
2.6 Low
-
notaryproject notation-go
notation-go has excessive memory allocation on verification
CVE-2023-25656
Fix available
7.5 High