Vulnerabilities in in-toto

3 results

CVE-2021-41087MEDIUMImproperly Implemented path matching for in-toto-golangEPSS 0.4%CVE-2023-32076MEDIUMin-toto vulnerable to Configuration Read From Local DirectoryEPSS 0.2%CVE-2025-62375MEDIUMgo-witness Improper Verification of AWS EC2 Identity DocumentsEPSS 0.2%