Product by Go

    Github.com/sigstore/rekor

    5 known vulnerabilities in Github.com/sigstore/rekor (Go), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Github.com/sigstore/rekor (Go)
    HighCVE-2026-48702

    Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

    also in 1 other product

    		7.5
    HighCVE-2023-30551

    Rekor's compressed archives can result in OOM conditions

    also in 2 other products

    		7.5
    MediumCVE-2026-23831

    Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message

    also in 2 other products

    		5.3
    MediumCVE-2023-33199

    malformed proposed intoto v0.0.2 entries can cause a panic in Rekor

    also in 2 other products

    		5.3
    MediumCVE-2026-24117

    Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL

    also in 2 other products

    		5.3

    All products by Go