github.com/sigstore/timestamp-authority

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2025-66564

Sigstore Timestamp Authority allocates excessive memory during request parsing

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.ge…

sigstore timestamp-authority github.com/sigstore/timestamp-authority/v2 golang-github-sigstore-timestamp-authority Debian Ubuntu Go

Dec 4, 2025