VDB

GO-2025-4192

GO-2025-4192 PUBLISHED

Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority

Affected Products

VendorProductVersions
github.comsigstore/timestamp-authority0, 0
github.comsigstore/timestamp-authority/v20, 0

Timeline

  • Dec 8, 2025 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›