Alpine/cosign: medium 5.3
Cosign is a sigstore signing tool for OCI containers. Cosign is susceptible to a denial of service by an attacker controlled registry. An attacker who controls a remote registry can return a high numb
Action: Upgrade cosign to 2.2.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1-r0 | - |
Fixed versions
| 2.2.1-r0 |
Sources
published · modified · JSON