| Package | Affected versions | Patched versions |
|---|---|---|
| cosign | = 0.7.0= 0.8.0= 0.9.0= 1.0= 1.1= 1.5= 1.6= 1.7= 1.8= 1.8.5= 1.9= 2.0.1 |
The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free