github.com/slsa-framework/slsa-verifier/v2
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| slsa-verifier vulnerable to mproper validation of npm's publish attestations | github.com/slsa-framework/slsa-verifier/v2github.com/slsa-framework/slsa-verifier | Go | Low | Fix reported |