MEDIUM5.3Go
GHSA-7q3q-5px6-4c5p· CVE-2026-31959, GO-2026-4671Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval
Modified: 3/23/2026
package
pkg:go/github.com/anchore/quill
Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval
Modified: 3/23/2026
Quill has DoS via unbounded read of HTTP response body during notarization
Modified: 3/23/2026
Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing
Modified: 3/23/2026
Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval in github.com/anchore/quill
Modified: 3/23/2026
Quill has DoS via unbounded read of HTTP response body during notarization in github.com/anchore/quill
Modified: 3/23/2026
Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill
Modified: 3/23/2026