golang-github-sigstore-fulcio vulnerabilities (Debian)
3 vulnerabilities.
golang-github-sigstore-fulcioDebianFulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage8.7 Highgolang-github-sigstore-fulcioDebianFulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass5.8 Mediumgolang-github-sigstore-fulcioDebianFulcio allocates excessive memory during token parsing7.5 High