All products

github.com/sigstore/timestamp-authority/v2

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sigstore Timestamp Authority has OOM due to unbounded metric label cardinalityCVE-2026-49835 · GHSA-9C54-X2G4-V92JVersion ranges need review. github.com/sigstore/timestamp-authority/v2github.com/sigstore/timestamp-authority Go Medium Fix reported
Sigstore Timestamp Authority has Improper Certificate Validation in verifierCVE-2026-39984 · GHSA-XM5M-WGH2-RRG3Version ranges need review. github.com/sigstore/timestamp-authority/v2github.com/sigstore/timestamp-authority GoRed Hat Medium Fix reported
Sigstore Timestamp Authority allocates excessive memory during request parsingCVE-2025-66564 · GHSA-4QG8-FJ49-PXJHVersion ranges need review. github.com/sigstore/timestamp-authority/v2github.com/sigstore/timestamp-authority GoRed Hat High Fix reported