Skip to content
OpenAdvisories

Package · Wolfi

gh-doc

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2024-45395

    Unbounded loop over untrusted input can lead to endless data attack

    sigstore-go, a Go library for Sigstore signing and verification, is susceptible to a denial of service attack in versions prior to 0.6.1 when a verifier is provided a maliciously crafted Sigstore Bundle containing large amounts of verifiable data, in the form…

    sigstore sigstore-go slsa-verifier cosign Wolfi Go