github.com/notaryproject/notation-go
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| notation-go has an OS error when setting CRL cache leads to denial of signature verification | github.com/notaryproject/notation-go | Go | Low | Fix reported | |
| notation-go's timestamp signature generation lacks certificate revocation check | github.com/notaryproject/notation-go | Go | Medium | Fix reported | |
| notation-go's verification bypass can cause users to verify the wrong artifact | github.com/notaryproject/notation-go | Go | High | Fix reported | |
| notation-go has excessive memory allocation on verification | github.com/notaryproject/notation-go | Go | High | Fix reported |