Skip to main content
Version: v1.1.x

GHSA-PMWQ-PJRM-6P5R

CVE Details

Visit the official vulnerability details page for GHSA-PMWQ-PJRM-6P5R to learn more.

Initial Publication

05/08/2026

Last Update

05/08/2026

Third Party Dependency

github.com/in-toto/in-toto-golang

NIST CVE Summary

in-toto-golang and in-toto-python have inconsistent negation behavior

CVE Severity

4.1

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

fixed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.0⚠️ Impacted⚠️ Impacted
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.