Product by Go
Github.com/sigstore/cosign/v2
4 known vulnerabilities in Github.com/sigstore/cosign/v2 (Go), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-29903 | Cosign vulnerable to machine-wide denial of service via malicious artifacts | 4.2 | |
| Medium | CVE-2024-29902 | Cosign vulnerable to system-wide denial of service via malicious attachments | 4.2 | |
| Medium | CVE-2026-22703 | Cosign verification accepts any valid Rekor entry under certain conditions | 5.5 | |
| Medium | CVE-2023-46737 | Possible endless data attack from attacker-controlled registry in cosign | 3.1 |