github.com/sigstore/rekor vulnerabilities (Go)

5 vulnerabilities.

• github.com/sigstore/rekor Go Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic CVE-2026-48702 Fix available 7.5 HighJune 11, 2026
• github.com/sigstore/rekor Go Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL CVE-2026-24117 Fix available 5.3 MediumJanuary 22, 2026
• github.com/sigstore/rekor Go Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message CVE-2026-23831 Fix available 5.3 MediumJanuary 22, 2026
• github.com/sigstore/rekor Go malformed proposed intoto v0.0.2 entries can cause a panic in Rekor CVE-2023-33199 Fix available 5.3 MediumMay 26, 2023
• github.com/sigstore/rekor Go Rekor's compressed archives can result in OOM conditions CVE-2023-30551 Fix available 7.5 HighMay 3, 2023