LOWGo
GHSA-r2xv-vpr2-42m9· GO-2023-2188slsa-verifier vulnerable to mproper validation of npm's publish attestations
Modified: 9/10/2026
package
Go/github.com/slsa-framework/slsa-verifier
pkg:go/github.com/slsa-framework/slsa-verifier
—Go
GO-2023-2188· GHSA-r2xv-vpr2-42m9slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier
Modified: 2/4/2026