Skip to main content

In Toto

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2023-32076 May 10, 18:15 PyPI MEDIUM PATCH This Month

in-toto is a framework to protect supply chain integrity. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure In Toto
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-41087 Sep 21, 21:15 Go MEDIUM PATCH This Month

in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Path Traversal In Toto Golang In Toto
NVD GitHub
CVSS 3.1
6.5
EPSS
0.4%
CVE-2023-32076 PyPI
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

in-toto is a framework to protect supply chain integrity. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure In Toto
NVD GitHub
CVE-2021-41087 Go
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Path Traversal In Toto Golang In Toto
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy