Go to main page
Versions in this module
v0
Jun 1, 2022 GO-2023-1829 +2 more
GO-2023-1829: Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
GO-2023-1831: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
Dec 17, 2021 GO-2023-1829 +2 more
GO-2023-1829: Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
GO-2023-1831: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
Nov 19, 2021 GO-2023-1829 +2 more
GO-2023-1829: Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
GO-2023-1831: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
Oct 20, 2021 GO-2023-1829 +2 more
GO-2023-1829: Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
GO-2023-1831: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry