notaryproject vulnerabilities
7 published CVEs name notaryproject among the affected products.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-51491
Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go
notaryproject · notation-go
Low3.3 - CVE-2024-56138
Timestamp signature generation lacks certificate revocation check in notion-go
notaryproject · notation-go
Medium4.0 - CVE-2024-23332
Client configured with permissive trust policies susceptible to rollback attack in Notary Project
notaryproject · specifications
Medium4.0 - CVE-2023-33959
Verification bypass can cause users into verifying the wrong artifact
notaryproject · notation-go
High8.4 - CVE-2023-33958
Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation
notaryproject · notation
Medium5.4 - CVE-2023-33957
Denial of service from high number of artifact signatures in notation
notaryproject · notation
Low2.6 - CVE-2023-25656
notation-go has excessive memory allocation on verification
notaryproject · notation-go
High7.5