CVE-2026-48702

A flaw was found in Rekor. The Package.Unmarshal function, which processes Alpine Package Keep APK files, decompresses gzip streams without limiting the total decompressed size. A remote attacker can exploit this by crafting a malicious APK file with a high compression ratio, causing the server t...

SUSE CVE-2026-23831

Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message, causing nil Pointer Dereference. Function validate returns nil success when message is...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: ratify, spire-server, kyverno-notation-aws, teleport, gh, rekor, policy-controller, neuvector-sigstore-interface, ko, slsa-verifier, trivy, cosign, skaffold, falcoctl, aactl, vexctl, tkn, zarf, witness, zot, buildkitd, flux-source-controller, tekton-chains,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: ratify, spire-server, kyverno-notation-aws, teleport, gh, rekor, policy-controller, neuvector-sigstore-interface, ko, slsa-verifier, trivy, cosign, skaffold, falcoctl, aactl, vexctl, tkn, zarf, witness, zot, buildkitd, flux-source-controller, tekton-chains,...

UBUNTU-CVE-2026-23831

Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message, causing nil Pointer Dereference. Function validate returns nil success when message is...

CVE-2026-23831

Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message, causing nil Pointer Dereference. Function validate returns nil success when message is...

CVE-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

SUSE CVE-2023-33199

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the intoto/v0.0.2 type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error...