Skip to main content
Version: v1.3.x

GHSA-PMWQ-PJRM-6P5R

CVE Details​

Visit the official vulnerability details page for GHSA-PMWQ-PJRM-6P5R to learn more.

Initial Publication​

05/08/2026

Last Update​

05/08/2026

Third Party Dependency​

github.com/in-toto/in-toto-golang

NIST CVE Summary​

in-toto-golang and in-toto-python have inconsistent negation behavior

CVE Severity​

4.1

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

fixed

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted
1.1.8⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.