github.com/anchore/quill
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval | github.com/anchore/quill | Go | Medium | Fix reported | |
| Quill has DoS via unbounded read of HTTP response body during notarization | github.com/anchore/quill | Go | Medium | Fix reported | |
| Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing | github.com/anchore/quill | Go | Medium | Fix reported |