Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/06/2023 Updated: 01/04/2024

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation-go library to v1.0.0-rc.6 or above. Users unable to upgrade may restrict container registries to a set of secure and trusted container registries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
notaryproject notation-go 1.0.0
notaryproject notation-go

Demo for using package with vulnerability wwwcveorg/CVERecord?id=CVE-2023-33959

CWE-347 https://github.com/notaryproject/notation-go/security/advisories/GHSA-xhg5-42rf-296r https://nvd.nist.gov https://github.com/dattq88/PoC-unused-deps-with-cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-33959

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect