SUSE CVE-2025-66564

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type heade...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: zot, neuvector-sigstore-interface, skaffold, gitsign, gh, ratify, aactl, tekton-chains, flux-source-controller, kubescape, goreleaser, policy-controller, ko, sigstore-scaffolding, zarf, teleport, vexctl, tkn, cosign, falcoctl, witness, spire-server, docker-cli-buildx...

CVE-2025-66564

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type heade...