in-toto

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

in-toto records in CISA KEV

No in-toto vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in In-toto-golang · all components

TI-2021-17929 CVE-2021-41087 · GHSA-vrxp-mg9f-hwf3

LOW 29

in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0043 Published 2021-09-21 Fixed in 0.3.0 CWE-345