in-toto-golang and in-toto-python have inconsistent negation behavior in github.com/in-toto/in-toto-golang

概要

参考情報

• in-toto/in-toto-golang security advisory · ADVISORY
• in-toto/in-toto-golang commit 36d782f · FIX
• in-toto/in-toto-golang#462 · FIX

github.com/in-toto/in-toto-golang のその他の脆弱性

• GHSA-pmwq-pjrm-6p5r中 4.1in-toto-golang and in-toto-python have inconsistent negation behavior
• CVE-2021-41087中 6.5in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticate…