Start for Free
go

github.com/notaryproject/notation-go

View on go registry
8 Total advisories
8 Vulnerabilities
0 Malware

Dependency scanning

Check whether github.com/notaryproject/notation-go is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

LOW 3.3
Go

CVE-2024-51491

notation-go has an OS error when setting CRL cache leads to denial of signature verification
MEDIUM 4.0
Go

CVE-2024-56138

notation-go's timestamp signature generation lacks certificate revocation check
HIGH 8.8
Go

CVE-2023-33959

notation-go's verification bypass can cause users to verify the wrong artifact
HIGH 7.5
Go

CVE-2023-25656

notation-go has excessive memory allocation on verification
UNKNOWN
Go

CVE-2024-51491

notation-go has an OS error when setting CRL cache leads to denial of signature verification in github.com/notaryproject/notation-go
UNKNOWN
Go

CVE-2023-25656

Denial of service from memory exhaustion in github.com/notaryproject/notation-go
UNKNOWN
Go

CVE-2023-33959

Verification bypass in github.com/notaryproject/notation-go
UNKNOWN
Go

CVE-2024-56138

notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes