What’s Vulnerable › Products

notaryproject notation-go vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your notaryproject notation-go version is affected

Latest notaryproject notation-go vulnerabilities

• CVE-2024-56138 — Timestamp signature generation lacks certificate revocation check in notion-go (CVSS 4.0)
• CVE-2024-51491 — Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go (CVSS 3.3)
• CVE-2024-23332 — Client configured with permissive trust policies susceptible to rollback attack in Notary Project (CVSS 6.8)
• CVE-2023-33959 — Verification bypass can cause users into verifying the wrong artifact (CVSS 8.8)
• CVE-2023-33958 — Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation (CVSS 6.5)
• CVE-2023-33957 — Denial of service from high number of artifact signatures in notation (CVSS 5.7)
• CVE-2023-25656 — notation-go has excessive memory allocation on verification (CVSS 7.5)