VDB

GO-2025-3381

GO-2025-3381 PUBLISHED

notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Affected Products

VendorProductVersions
github.comnotaryproject/notation-go1.2.0-beta.1, 1.2.0-beta.1

Timeline

  • Jan 14, 2025 CVE Published
  • Feb 4, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›