SUSE CVE-2025-66564

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type heade...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: gh, tflint, teleport, docker-cli-buildx, spire-server, tkn, zot, gitsign, kyverno-notation-aws, cosign, witness, sigstore-scaffolding, kubescape, skaffold, tekton-chains, zarf, goreleaser, aactl, falcoctl, neuvector-sigstore-interface, vexctl, flux-source-controller,...

CVE-2025-66564

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type heade...