MEDIUM4.0Go
GHSA-57wx-m636-g3g8· CVE-2024-23332, GO-2024-2472Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
Modified: 9/10/2026
package
Go/github.com/notaryproject/notation
pkg:go/github.com/notaryproject/notation
MEDIUM5.7Go
GHSA-9m3v-v4r5-ppx7· CVE-2023-33957, GO-2023-1829Notation vulnerable to denial of service from high number of artifact signatures
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-rvrx-rrwh-r9p6· CVE-2023-33958, GO-2023-1831Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack
Modified: 9/10/2026
—Go
GO-2023-1829· CVE-2023-33957, GHSA-9m3v-v4r5-ppx7Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
Modified: 3/3/2026
—Go
GO-2023-1831· CVE-2023-33958, GHSA-rvrx-rrwh-r9p6Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
Modified: 3/3/2026
—Go
GO-2024-2472· CVE-2024-23332, GHSA-57wx-m636-g3g8Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
Modified: 7/2/2026