Junglewise Threat Intelligence

CVE-2023-33958: GO-2023-1831 - Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation

CVE-2023-33958 · Severity: low · CVSS 3.1 · Published 2024-08-20

Technologies: github.com/notaryproject/notation (Go). Vendors: Go.

Executive brief

Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation

Affected products

  • Go github.com/notaryproject/notation

Related threats