{"action":"Upgrade github.com/notaryproject/notation-go to 1.0.0-rc.6 or later.","affected":[{"fixed":"1.0.0-rc.6","introduced":"0"}],"component":"github.com/notaryproject/notation-go","cve_ids":["CVE-2023-33959"],"ecosystem":"Go","epss":0.00354,"exploited":false,"fixed_versions":["1.0.0-rc.6"],"ghsa_id":"GHSA-xhg5-42rf-296r","id":"tcs_01M5KFZBHATQE44Q3QHNSTJS80","modified_at":"2026-02-04T02:43:08.765429Z","published_at":"2023-06-26T16:53:25Z","references":["https://osv.dev/vulnerability/GO-2023-1832","https://github.com/notaryproject/notation-go/security/advisories/GHSA-xhg5-42rf-296r","https://github.com/notaryproject/notation-go/commit/39c8ed050a65cca3f3f308534acb612096735a64","https://github.com/notaryproject/notation-go/commit/eba60f5aed9c9e05dee55324423c95fe34700b4c","https://github.com/notaryproject/notation-go/releases/tag/v1.0.0-rc.6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1832","url":"https://osv.dev/vulnerability/GO-2023-1832"}],"summary":"Verification bypass in github.com/notaryproject/notation-go"}