crates.io/nono-cli: medium 6.6
nono-cli'scregistry pack verification can fail open when provenance metadata is absent
Action: Upgrade nono-cli to 0.61.3 or later.
cargo update -p nono-cli --precise 0.61.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.61.3 | - |
Fixed versions
| 0.61.3 |
Sources
- osv: GHSA-hc4m-q9jh-xw4j
- https://github.com/always-further/nono/security/advisories/GHSA-hc4m-q9jh-xw4j
- https://github.com/nolabs-ai/nono/commit/db07375031642f089d549b4f7b9abece87e39f87
- https://github.com/always-further/nono
- https://github.com/nolabs-ai/nono/releases/tag/v0.62.0
published · modified · JSON