slsa-verifier vulnerabilities

Known vulnerabilities in the slsa-verifier package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2.6.0-r3
L GHSA-cq38-jh5f-37mq	<2.6.0-r3
L GHSA-v23v-6jw2-98fq	<2.6.0-r1
L CVE-2024-41110	<2.6.0-r1
L CVE-2024-24791	<2.5.1-r9
L GHSA-hw49-2p59-3mhj	<2.5.1-r9
L GHSA-v6v8-xj6m-xwqh	<2.5.1-r8
M Information Exposure Through Log Files	<2.5.1-r8
M CVE-2024-24789	<2.5.1-r7
L GHSA-49gw-vxvf-fc2g	<2.5.1-r7
L GHSA-236w-p7wf-5ph8	<2.5.1-r7
C CVE-2024-24790	<2.5.1-r7
L GHSA-95pr-fxf5-86gv	<2.5.1-r4
L GHSA-9763-4f94-gfch	<2.5.1-r4
L CVE-2024-24786	<2.5.1-r4
H Origin Validation Error	<2.5.1-r4
L CVE-2024-29903	<2.5.1-r4
L CVE-2024-28180	<2.5.1-r4
L CVE-2024-29902	<2.5.1-r4
L GHSA-88jx-383q-w4qc	<2.5.1-r4
L GHSA-c5q2-7r4c-mv6g	<2.5.1-r4
L GHSA-vfp6-jrw2-99g9	<2.5.1-r4
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2.5.1-r4
L GHSA-8r3f-844c-mc37	<2.5.1-r4
L GHSA-xw73-rw38-6vjc	<2.5.1-r4
L GHSA-4v7x-pqxf-cx7m	<2.5.1-r4
L CVE-2023-45288	<2.5.1-r4
M Improper Validation of Integrity Check Value	<2.5.1-r0
H CVE-2023-44487	<2.5.1-r0
L GHSA-m425-mq94-257g	<2.5.1-r0
H Allocation of Resources Without Limits or Throttling	<2.5.1-r0
L GHSA-4374-p667-p6c8	<2.5.1-r0
L GHSA-2c7c-3mj9-8fqh	<2.5.1-r0
L GHSA-qppj-fm5r-hxr3	<2.5.1-r0
L GHSA-45x7-px36-x8w8	<2.5.1-r0
L GHSA-jq35-85cj-fj4p	<2.5.1-r0
L CVE-2023-45290	<2.4.1-r2
L GHSA-rr6r-cfgf-gc6h	<2.4.1-r2
L GHSA-fgq5-q76c-gx78	<2.4.1-r2
L CVE-2023-45289	<2.4.1-r2
L GHSA-3q2c-pvp5-3cqp	<2.4.1-r2
L GHSA-32ch-6x54-q4h9	<2.4.1-r2
L CVE-2024-24783	<2.4.1-r2
L CVE-2024-24785	<2.4.1-r2
L CVE-2024-24784	<2.4.1-r2
L GHSA-j6m3-gc37-6r6q	<2.4.1-r2
M CVE-2023-39326	<2.4.1-r1
L GHSA-9f76-wg39-x86h	<2.4.1-r1
H CVE-2023-45285	<2.4.1-r1
L GHSA-5f94-vhjq-rpg8	<2.4.1-r1

Vulnerability

Vulnerable Version

Loop with Unreachable Exit Condition ('Infinite Loop')

<2.6.0-r3

<2.6.0-r3

<2.6.0-r1

<2.6.0-r1

<2.5.1-r9