github.com/slsa-framework/slsa-verifier/v2
View on Github
Activity
- Latest release
- 1y ago
- Total releases
- 32
- Cadence
- ~3 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Dec 03, 2022
| Version | Released | |
|---|---|---|
v2.7.1
patch
|
v2.7.1
patch
Dependencies (20)
+ 12 more |
|
v2.7.1-rc.2
pre
|
v2.7.1-rc.2
pre
Dependencies (20)
+ 12 more |
|
v2.7.1-rc.1
pre
|
v2.7.1-rc.1
pre
Dependencies (20)
+ 12 more |
|
v2.7.0
minor
|
v2.7.0
minor
Dependencies (20)
+ 12 more |
|
v2.7.0-rc.1
pre
|
v2.7.0-rc.1
pre
Dependencies (20)
+ 12 more |
|
v2.6.0
minor
|
v2.6.0
minor
Dependencies (20)
+ 12 more |
|
v2.6.0-rc.1
pre
|
v2.6.0-rc.1
pre
Dependencies (20)
+ 12 more |
|
v2.6.0-dev.1
pre
|
v2.6.0-dev.1
pre
Dependencies (20)
+ 12 more |
|
v2.5.1
minor
|
v2.5.1
minor
Dependencies (20)
+ 12 more |
|
v2.5.1-rc.0
pre
|
v2.5.1-rc.0
pre
Dependencies (20)
+ 12 more |
|
v2.4.1
patch
|
v2.4.1
patch
Dependencies (20)
+ 12 more |
|
v2.4.1-rc.1
pre
|
v2.4.1-rc.1
pre
Dependencies (20)
+ 12 more |
|
v2.4.1-rc.0
pre
|
v2.4.1-rc.0
pre
Dependencies (20)
+ 12 more |
|
v2.4.0-rc.1
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.4.0-rc.1
pre
Dependencies (20)
+ 12 more |
|
v2.4.0
minor
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.4.0
minor
Dependencies (20)
+ 12 more |
|
v2.4.0-rc.0
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.4.0-rc.0
pre
Dependencies (20)
+ 12 more |
|
v2.3.0-rc.3
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.3.0-rc.3
pre
Dependencies (19)
+ 11 more |
|
v2.3.0
minor
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.3.0
minor
Dependencies (19)
+ 11 more |
|
v2.3.0-rc.2
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.3.0-rc.2
pre
Dependencies (18)
+ 10 more |
|
v2.3.0-rc.1
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.3.0-rc.1
pre
Dependencies (19)
+ 11 more |
|
v2.3.0-rc.0
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.3.0-rc.0
pre
Dependencies (19)
+ 11 more |
|
v2.2.0
minor
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.2.0
minor
Dependencies (19)
+ 11 more |
|
v2.2.0-rc.0
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.2.0-rc.0
pre
Dependencies (19)
+ 11 more |
|
v2.1.0
minor
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.1.0
minor
Dependencies (19)
+ 11 more |
|
v2.1.0-rc.1
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.1.0-rc.1
pre
Dependencies (19)
+ 11 more |
|
v2.1.0-rc
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.1.0-rc
pre
Dependencies (19)
+ 11 more |
|
v2.1.1-rc.0
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.1.1-rc.0
pre
Dependencies (19)
+ 11 more |
|
v2.0.1-rc.3
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.0.1-rc.3
pre
Dependencies (17)
+ 9 more |
|
v2.0.1
initial
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.0.1
initial
Dependencies (17)
+ 9 more |
|
v2.0.1-rc.2
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.0.1-rc.2
pre
Dependencies (17)
+ 9 more |
|
v2.0.1-rc.1
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.0.1-rc.1
pre
Dependencies (17)
+ 9 more |
|
v2.0.1-rc.0
pre
1 CVE
GO-2023-2188
GHSA-r2xv-vpr2-42m9
Aug 21, 2024
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier Fixed in
2.4.1-rc.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v2.0.1-rc.0
pre
Dependencies (17)
+ 9 more |