github.com/sigstore/timestamp-authority/v2 vulnerabilities (Go)

3 vulnerabilities.

• github.com/sigstore/timestamp-authority/v2 Go Sigstore Timestamp Authority: OOM due to unbounded metric label cardinality CVE-2026-49835 Fix available 5.9 MediumJune 30, 2026
• github.com/sigstore/timestamp-authority/v2 Go Sigstore Timestamp Authority has Improper Certificate Validation in verifier CVE-2026-39984 Fix available 5.5 MediumApril 14, 2026
• github.com/sigstore/timestamp-authority/v2 Go Sigstore Timestamp Authority allocates excessive memory during request parsing CVE-2025-66564 Fix available 7.5 HighDecember 4, 2025