VDB

GO-2026-4354

GO-2026-4354 PUBLISHED

Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor

Affected Products

VendorProductVersions
github.comsigstore/rekor0, 0
github.comsigstore/rekor

Timeline

  • Feb 2, 2026 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›