Nnotaryproject

Products

Exploited and recent CVEs

• CVE-2024-51491 Low 3.3 Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go 0.2%
• CVE-2024-56138 Medium 4.0 Timestamp signature generation lacks certificate revocation check in notion-go 0.1%
• CVE-2024-23332 Medium 4.0 Client configured with permissive trust policies susceptible to rollback attack in Notary Project 0.3%
• CVE-2023-33959 High 8.4 Verification bypass can cause users into verifying the wrong artifact 0.4%
• CVE-2023-33958 Medium 5.4 Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation 0.5%
• CVE-2023-33957 Low 2.6 Denial of service from high number of artifact signatures in notation 0.5%
• CVE-2023-25656 High 7.5 notation-go has excessive memory allocation on verification 0.4%