Skip to content
OpenAdvisories

Package · Alpine

rekor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2023-30551

    Rekor's compressed archives can result in OOM conditions

    Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file su…

    sigstore rekor github.com/sigstore/rekor rekor Alpine Go