notaryproject vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 20241
3. 20252

Newest CVEs

• CVE-2024-51491

  Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go

  notaryproject · notation-go

  Low3.3
• CVE-2024-56138

  Timestamp signature generation lacks certificate revocation check in notion-go

  notaryproject · notation-go

  Medium4.0
• CVE-2024-23332

  Client configured with permissive trust policies susceptible to rollback attack in Notary Project

  notaryproject · specifications

  Medium4.0
• CVE-2023-33959

  Verification bypass can cause users into verifying the wrong artifact

  notaryproject · notation-go

  High8.4
• CVE-2023-33958

  Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation

  notaryproject · notation

  Medium5.4
• CVE-2023-33957

  Denial of service from high number of artifact signatures in notation

  notaryproject · notation

  Low2.6
• CVE-2023-25656

  notation-go has excessive memory allocation on verification

  notaryproject · notation-go

  High7.5