Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
go

github.com/sigstore/rekor

View on go registry
10 Total advisories
10 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
Go

CVE-2026-48702

Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor
HIGH 7.5
Go

CVE-2026-48702

Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
UNKNOWN
Go

CVE-2023-33199

malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
MEDIUM 5.3
Go

CVE-2026-23831

Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
MEDIUM 5.3
Go

CVE-2023-33199

malformed proposed intoto entries can cause a panic
UNKNOWN
Go

CVE-2023-30551

Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor
UNKNOWN
Go

CVE-2026-23831

Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor
UNKNOWN
Go

CVE-2026-24117

Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor
HIGH 7.5
Go

CVE-2023-30551

Rekor's compressed archives can result in OOM conditions
MEDIUM 5.3
Go

CVE-2026-24117

Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes