MEDIUMPyPI
GHSA-jjgp-whrp-gq8min-toto: PGP trust model not (fully) considered
Modified: 11/30/2024
package
PyPI/in-toto
pkg:pypi/in-toto
MEDIUM5.5PyPI
GHSA-wc64-c5rv-32pf· CVE-2023-32076, GHSA-p86f-xmg6-9q4xin-toto vulnerable to Configuration Read From Local Directory
Modified: 2/4/2026
—PyPI
PYSEC-2023-63· CVE-2023-32076, GHSA-p86f-xmg6-9q4xModified: 11/8/2023