cosign vulnerabilities (Red Hat)
10 vulnerabilities.
-
cosignRed Hat go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal 8.7 High -
cosignRed Hat sigstore-go fails to check signature timestamps against a signing key's validity period 3.1 Low -
cosignRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
cosignRed Hat go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header 6.9 Medium -
cosignRed Hat go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware 6.9 Medium -
cosignRed Hat go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For 6.9 Medium -
cosignRed Hat Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic 7.5 High -
cosignRed Hat OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse 2.1 Low -
cosignRed Hat pgx: SQL Injection via placeholder confusion with dollar quoted string literals 2.3 Low -
cosignRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High