All products

in-toto

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
in-toto vulnerable to Configuration Read From Local DirectoryCVE-2023-32076 · GHSA-P86F-XMG6-9Q4XVersion ranges need review. in-toto PyPI Medium Fix reported
in-toto: PGP trust model not (fully) consideredGHSA-JJGP-WHRP-GQ8M in-toto PyPI Medium No fix reported