Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation