The Singularity Image Format (SIF) reference implementation does not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures.
{ "url": "https://pkg.go.dev/vuln/GO-2022-1045", "review_status": "REVIEWED" }