github.com/sigstore/rekor
Software Supply Chain Transparency Log
View on Github
Activity
- Latest release
- 3w ago
- Total releases
- 48
- Cadence
- ~33 days
- Last 12 months
- 6
Reach
- Stars
- 1.2k
Details
- First release
- Jan 12, 2021
| Version | Released | |
|---|---|---|
v1.5.4
patch
|
v1.5.4
patch
Dependencies (71)
+ 63 more |
|
v1.5.3
patch
|
v1.5.3
patch
Dependencies (70)
+ 62 more |
|
v1.5.2
patch
|
v1.5.2
patch
Dependencies (70)
+ 62 more |
|
v1.5.1
patch
1 CVE
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev |
v1.5.1
patch
Dependencies (70)
+ 62 more |
|
v1.5.0
minor
1 CVE
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev |
v1.5.0
minor
Dependencies (70)
+ 62 more |
|
v1.4.3
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.3
patch
Dependencies (70)
+ 62 more |
|
v1.4.2
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.2
patch
Dependencies (72)
+ 64 more |
|
v1.4.1
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.1
patch
Dependencies (71)
+ 63 more |
|
v1.4.0
minor
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (69)
+ 61 more |
|
v1.3.10
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.10
patch
Dependencies (68)
+ 60 more |
|
v1.3.9
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.9
patch
Dependencies (67)
+ 59 more |
|
v1.3.8
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.8
patch
Dependencies (67)
+ 59 more |
|
v1.3.7
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.7
patch
Dependencies (67)
+ 59 more |
|
v1.3.6
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.6
patch
Dependencies (64)
+ 56 more |
|
v1.3.5
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.5
patch
Dependencies (64)
+ 56 more |
|
v1.3.4
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.4
patch
Dependencies (64)
+ 56 more |
|
v1.3.3
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.3
patch
Dependencies (62)
+ 54 more |
|
v1.3.2
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.2
patch
Dependencies (62)
+ 54 more |
|
v1.3.1
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.1
patch
Dependencies (62)
+ 54 more |
|
v1.3.0
minor
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0
minor
Dependencies (61)
+ 53 more |
|
v1.2.2
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.2
patch
Dependencies (59)
+ 51 more |
|
v1.2.1
patch
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.1
patch
Dependencies (54)
+ 46 more |
|
v1.2.0
minor
3 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (54)
+ 46 more |
|
v1.1.1
patch
4 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.1
patch
Dependencies (52)
+ 44 more |
|
v1.1.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (53)
+ 45 more |
|
v1.0.1
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.1
patch
Dependencies (49)
+ 41 more |
|
v1.0.0
major
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (49)
+ 41 more |
|
v1.0.0-rc.1
pre
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0-rc.1
pre
Dependencies (49)
+ 41 more |
|
v0.12.2
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.12.2
patch
Dependencies (49)
+ 41 more |
|
v0.12.1
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.12.1
patch
Dependencies (49)
+ 41 more |
|
v0.12.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.12.0
minor
Dependencies (48)
+ 40 more |
|
v0.11.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.11.0
minor
Dependencies (47)
+ 39 more |
|
v0.10.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.10.0
minor
Dependencies (47)
+ 39 more |
|
v0.10.0-rc.2
pre
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.10.0-rc.2
pre
Dependencies (47)
+ 39 more |
|
v0.10.0-rc.1
pre
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.10.0-rc.1
pre
Dependencies (47)
+ 39 more |
|
v0.9.1
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.9.1
patch
Dependencies (47)
+ 39 more |
|
v0.9.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.9.0
minor
Dependencies (47)
+ 39 more |
|
v0.8.2
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.8.2
patch
Dependencies (46)
+ 38 more |
|
v0.8.1
patch
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.8.1
patch
Dependencies (46)
+ 38 more |
|
v0.8.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.8.0
minor
Dependencies (46)
+ 38 more |
|
v0.7.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.7.0
minor
Dependencies (46)
+ 38 more |
|
v0.6.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.6.0
minor
Dependencies (47)
+ 39 more |
|
v0.5.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (46)
+ 38 more |
|
v0.4.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.4.0
minor
Dependencies (46)
+ 38 more |
|
v0.3.0
minor
5 CVEs
CVE-2026-48702
GO-2026-5778
GHSA-47q9-m4ww-924m
Jul 07, 2026
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor Fixed in
1.5.2
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.3.0
minor
Dependencies (42)
+ 34 more |
|
v0.2.0
minor
4 CVEs
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.2.0
minor
Dependencies (41)
+ 33 more |
|
v0.1.1
patch
4 CVEs
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.1.1
patch
Dependencies (32)
+ 24 more |
|
v0.1.0
initial
4 CVEs
CVE-2026-23831
GO-2026-4354
GHSA-273p-m2cw-6833
Feb 02, 2026
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2026-24117
GO-2026-4355
GHSA-4c4x-jm2x-pf9j
Feb 02, 2026
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor Fixed in
1.5.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-33199
GO-2023-1795
GHSA-frqx-jfcm-6jjr
Aug 20, 2024
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor Fixed in
1.2.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-30551
GO-2023-1754
GHSA-2h5h-59f5-c5x9
Aug 20, 2024
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor Fixed in
1.1.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.1.0
initial
Dependencies (33)
+ 25 more |