Denial Of Service (DoS)

github.com/notaryproject/notation is vulnerable to Denial of Service DoS attacks. The vulnerability is due to the maxSignatureAttempts in verify.go, which allows an attacker to cause denial of service by submitting endless signature data...

Information Disclosure

github.com/foxcpp/maddy is vulnerable to information disclosure. The vulnerability exists in verify.go of auth.shadow module due to the presence of MD5 hashes which allows an attacker to gain access to sensitive information...