Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/sigstore/sigstore-go

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/sigstore/sigstore-go in go

Low
19 days ago

sigstore-go fails to check signature timestamps against a signing key's validity period GSA_kwCzR0hTQS13cXFjLWpqY3EtdmZ4bc4ABg_c

go github.com/sigstore/sigstore-go
Moderate
about 1 month ago

sigstore-go has a multi-log threshold bypass via single compromised log GSA_kwCzR0hTQS05dmNyLXAzcmotcTVxNs4ABacw

go github.com/sigstore/sigstore-go
Low
almost 2 years ago

sigstore-go has an unbounded loop over untrusted input can lead to endless data attack GSA_kwCzR0hTQS1jcTM4LWpoNWYtMzdtcc4AA_TY

go github.com/sigstore/sigstore-go

Filter by Severity

Low 2 Moderate 1