Skip to content
OpenAdvisories

Package · Debian

golang-github-sigstore-timestamp-authority

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-66564

    Sigstore Timestamp Authority allocates excessive memory during request parsing

    Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.ge…

    sigstore timestamp-authority zot kubescape Debian Ubuntu Wolfi Go