Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/sigstore/rekor
Go
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
CVE-2026-48702 · GHSA-47Q9-M4WW-924M
Version ranges need review.
github.com/sigstore/rekor
Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL
CVE-2026-24117 · GHSA-4C4X-JM2X-PF9J
Version ranges need review.
github.com/sigstore/rekor
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
CVE-2026-23831 · GHSA-273P-M2CW-6833
Version ranges need review.
github.com/sigstore/rekor
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
malformed proposed intoto entries can cause a panic
CVE-2023-33199 · GHSA-FRQX-JFCM-6JJR
Version ranges need review.
github.com/sigstore/rekor
Go
Medium
Fix reported
2026-09-10
Rekor's compressed archives can result in OOM conditions
CVE-2023-30551 · GHSA-2H5H-59F5-C5X9
Version ranges need review.
github.com/sigstore/rekor
Red Hat OpenShift Container Platform 4/openshift4/ose-openshift-proxy-pull-test-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
