VDB
GO-2023-1795
GO-2023-1795
PUBLISHED
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | skaffold | 0, 0, 0 |
| chainguard | tkn | *, *, * |
| wolfi | skaffold | 0, 0, 0 |
| chainguard | aactl | 0, 0, 0 |
| chainguard | rekor | *, *, * |
| wolfi | aactl | 0, 0, 0 |
| wolfi | tkn | *, *, * |
| wolfi | rekor | *, *, * |
| github.com | sigstore/rekor | 0, 0 |
| chainguard | rekor-fips | *, *, * |
Timeline
- Aug 20, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 18, 2026 Security Advisory