github.com/notaryproject/notation
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry | github.com/notaryproject/notation | Go | Medium | No fix reported | |
| Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack | github.com/notaryproject/notation | Go | Medium | Fix reported | |
| Notation vulnerable to denial of service from high number of artifact signatures | github.com/notaryproject/notation | Go | Medium | Fix reported |