layout

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 15, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 17, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 7, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 20, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 14, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 24, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 18, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 4, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jun 3, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 27, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 12, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 5, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 4, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 3, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Feb 18, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jan 30, 2022 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jan 21, 2022 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Dec 10, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ func WriteSignedImageIndex(path string, si oci.SignedImageIndex) error

Dec 6, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ func SignedImageIndex(path string) (oci.SignedImageIndex, error)

+ func WriteSignedImage(path string, si oci.SignedImage) error