—
GO-2026-4672
Quill has DoS via unbounded read of HTTP response body during notarization in github.com/anchore/quill
Quick fix
GO-2026-4672 — github.com/anchore/quill: upgrade to the fixed version with the command below.
go get github.com/anchore/quill@v0.7.1Details
Quill has DoS via unbounded read of HTTP response body during notarization in github.com/anchore/quill
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/anchore/quill/security/advisories/GHSA-g32c-4pvp-769g[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-31960[ADVISORY]
- https://github.com/anchore/quill/commit/9cdb0823ea1d2c45dcc11557f8c5cd7291c75d29[FIX]
- https://developer.apple.com/documentation/notaryapi/get-submission-log[WEB]
- https://github.com/anchore/quill/releases/tag/v0.7.1[WEB]