Affected by GO-2025-3381 and 1 other vulnerabilities

GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

GO-2025-3382: notation-go has an OS error when setting CRL cache leads to denial of signature verification in github.com/notaryproject/notation-go

semver

package

v1.3.0-rc.1 Latest Latest Go to latest Published: Sep 27, 2024 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Package semver provides functions related to semanic version. This package is based on "golang.org/x/mod/semver"

This section is empty.

This section is empty.

func ComparePluginVersion(v, w string) (int, error)

ComparePluginVersion validates and compares two plugin semantic versions.

The result will be 0 if v == w, -1 if v < w, or +1 if v > w.

func IsValid(version string) bool

IsValid returns true if version is a valid semantic version

This section is empty.