Database/Container, Kubernetes & orchestration
cosign / sigstore: Multiple verify-blob flaws cause successful verification of unsigned or wrongly-signed artifacts
CVE-2022-36056Container, Kubernetes & orchestrationcurated
Impact
Multiple verify-blob flaws cause successful verification of unsigned or wrongly-signed artifacts
Who can reach it
Malicious artifact
What to do
Upgrade cosign; re-verify
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.