ratify-project vulnerabilities

Products

• github.com/ratify-project/ratify 1

Latest ratify-project CVEs

Newest publication first

1. CVE-2025-27403 Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

   Published 2025-03-11

   High·CVSS 7.2 EPSS 0.48%

   Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.