VDB
GO-2025-4193
GO-2025-4193
PUBLISHED
Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | sigstore/fulcio | 0, 0 |
Timeline
- Dec 8, 2025 CVE Published
- Feb 4, 2026 CVE Updated
- May 1, 2026 Security Advisory