Google Llc Go-Attestation vulnerabilities

CVE-2022-0317 [LOW] CWE-20 CVE-2022-0317: An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to prov An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to provide a maliciously-formed Quote over no/some PCRs, causing AKPublic.Verify to succeed despite the inconsistency. Subsequent use of the same set of PCR values in Eventlog.Verify lacks the authentication performed by quote verification, meaning a local attacke