in-toto
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| go-witness | 1 | – | Oct 15, 2025 |
| in-toto | 1 | – | May 10, 2023 |
| in-toto-golang | 1 | – | Sep 21, 2021 |
Exploited and recent CVEs
- CVE-2025-62375 go-witness Improper Verification of AWS EC2 Identity Documents 0.2%
- CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory 0.2%
- CVE-2021-41087 Improperly Implemented path matching for in-toto-golang 0.4%