notaryproject records
6 published records for vendor notaryproject.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 83.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-400 Uncontrolled Resource Consumption2
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-672 Operation on a Resource after Expiration or Release1
- CWE-703 Improper Check or Handling of Exceptional Conditions1
- CWE-770 Allocation of Resources Without Limits or Throttling1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-33959No exploit | Verification bypass can cause users into verifying the wrong artifactnotaryproject · notation-go · CWE-347 | High8.8 | — | 0.3% | Jun 6, 2023 |
30Monitor | CVE-2023-25656No exploit | notation-go has excessive memory allocation on verificationnotaryproject · notation-go · CWE-770 | High7.5 | — | 0.4% | Feb 20, 2023 |
27Monitor | CVE-2024-23332No exploit | Client configured with permissive trust policies susceptible to rollback attack in Notary Projectnotaryproject · notation-go · CWE-672 | Medium6.8 | — | 0.2% | Jan 19, 2024 |
26Monitor | CVE-2023-33958No exploit | Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notationnotaryproject · notation-go · CWE-400 | Medium6.5 | — | 0.4% | Jun 6, 2023 |
22Monitor | CVE-2023-33957No exploit | Denial of service from high number of artifact signatures in notationnotaryproject · notation-go · CWE-400 | Medium5.7 | — | 0.5% | Jun 6, 2023 |
13Monitor | CVE-2024-51491No exploit | Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-gonotaryproject · notation-go · CWE-703 | Low3.3 | — | 0.1% | Jan 13, 2025 |
- CVE-2023-3395935Monitor
Verification bypass can cause users into verifying the wrong artifact
HighCVSS 8.8No exploitEPSS 0%notaryproject · notation-goJun 6, 2023
- CVE-2023-2565630Monitor
notation-go has excessive memory allocation on verification
HighCVSS 7.5No exploitEPSS 0%notaryproject · notation-goFeb 20, 2023
- CVE-2024-2333227Monitor
Client configured with permissive trust policies susceptible to rollback attack in Notary Project
MediumCVSS 6.8No exploitEPSS 0%notaryproject · notation-goJan 19, 2024
- CVE-2023-3395826Monitor
Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation
MediumCVSS 6.5No exploitEPSS 0%notaryproject · notation-goJun 6, 2023
- CVE-2023-3395722Monitor
Denial of service from high number of artifact signatures in notation
MediumCVSS 5.7No exploitEPSS 0%notaryproject · notation-goJun 6, 2023
- CVE-2024-5149113Monitor
Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go
LowCVSS 3.3No exploitEPSS 0%notaryproject · notation-goJan 13, 2025