Vendors / notaryproject Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now notaryproject records in CISA KEV No notaryproject vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
notion-go is a collection of libraries for supporting sign and verify OCI artifacts.
CVSS 3.1 LOW 3.3· Local · No auth · User interaction · EPSS 0.00196 · Published 2025-01-13 · Fixed in 1.3.0-rc.2 CWE-703
Priority LOW 39
notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0044 · Published 2023-02-20 · Fixed in 1.0.0-rc.3 CWE-770
Priority LOW 38
notation is a CLI tool to sign and verify OCI artifacts and container images.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00354 · Published 2023-06-06 · Fixed in 1.0.0-rc.6 CWE-347
Priority LOW 30
The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts.
CVSS 3.1 MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.0029 · Published 2024-01-19 · No fix listed CWE-672
Priority LOW 29
notation is a CLI tool to sign and verify OCI artifacts and container images.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00485 · Published 2023-06-06 · Fixed in 1.0.0-rc.6 CWE-400
Priority LOW 26
notation is a CLI tool to sign and verify OCI artifacts and container images.
CVSS 3.1 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00506 · Published 2023-06-06 · Fixed in 1.0.0-rc.6 CWE-400
Open these records in search → All records by CVSS severity
0 2 4 1 0
THREATIST.IORead the docs