Sigstore Fulcio vulnerabilities
- sigstore fulcio Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage 8.7 High
- linuxfoundation fulcio Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass 5.8 Medium
- linuxfoundation fulcio Fulcio allocates excessive memory during token parsing 7.5 High