pkg:Go/github.com/sigstore/rekor
5 total CVEsHIGH3MEDIUM6
✅ Check your installed version
All known vulnerabilities
HIGH7.5CVE-2026-48702Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor >= 0.3.0, < 1.5.2
HIGH7.5CVE-2023-30551Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor from 0, < 1.1.1
HIGH7.5CVE-2023-30551Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor from 0, < 1.1.1
MEDIUM5.3Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor
from 0, < 1.5.0
MEDIUM5.3Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor
from 0, < 1.5.0
MEDIUM5.3Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor
from 0, < 1.5.0
MEDIUM5.3Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor
from 0, < 1.5.0
MEDIUM5.3malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
from 0, < 1.2.0
MEDIUM5.3malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
from 0, < 1.2.0