MEDIUM5.3Go
GHSA-7q3q-5px6-4c5p· CVE-2026-31959, GO-2026-4671Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval
Modified: 3/23/2026
package
Go/github.com/anchore/quill
pkg:go/github.com/anchore/quill
MEDIUM5.3Go
GHSA-g32c-4pvp-769g· CVE-2026-31960, GO-2026-4672Quill has DoS via unbounded read of HTTP response body during notarization
Modified: 3/23/2026
MEDIUM5.5Go
GHSA-xj69-m9qq-8m94· CVE-2026-31961, GO-2026-4675Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing
Modified: 3/23/2026
—Go
GO-2026-4671· CVE-2026-31959, GHSA-7q3q-5px6-4c5pQuill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval in github.com/anchore/quill
Modified: 3/23/2026
—Go
GO-2026-4672· CVE-2026-31960, GHSA-g32c-4pvp-769gQuill has DoS via unbounded read of HTTP response body during notarization in github.com/anchore/quill
Modified: 3/23/2026
—Go
GO-2026-4675· CVE-2026-31961, GHSA-xj69-m9qq-8m94Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill
Modified: 3/23/2026