All 4 CVE vulnerabilities found in rekor, with AI-generated Chinese analysis, references, and POCs.
Vendor: sigstore
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-24117 | Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL CWE-918 | 5.3 | Medium | 2026-01-22 |
| CVE-2026-23831 | Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message CWE-476 | 5.3 | Medium | 2026-01-22 |
| CVE-2023-33199 | malformed proposed intoto v0.0.2 entries can cause a panic in Rekor CWE-617 | 5.3 | Medium | 2023-05-26 |
| CVE-2023-30551 | Rekor's compressed archives can result in OOM conditions CWE-770 | 7.5 | High | 2023-05-08 |
All 4 known CVE vulnerabilities affecting rekor with full Chinese analysis, references, and POCs where available.