Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/sigstore/fulcio

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/sigstore/fulcio in go

High
about 2 months ago

Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage GSA_kwCzR0hTQS1mNW1yLXE4NXAtNmhoNs4ABZy-

go github.com/sigstore/fulcio
Moderate
7 months ago

Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass GSA_kwCzR0hTQS01OWpwLXBqODQtNDVtcs4ABRB2

go github.com/sigstore/fulcio
High
8 months ago

Fulcio allocates excessive memory during token parsing GSA_kwCzR0hTQS1mODNmLXhweDctZmZwd84ABPOR

go github.com/sigstore/fulcio

Filter by Severity

High 2 Moderate 1