Rekor 安全漏洞

Rekor is open source software that provides an immutable, tamper-proof ledger for metadata generated in the supply chain of software projects. A security vulnerability exists in versions of Rekor prior to 1.1.1, which stems from reading archived metadata files into memory without first checking t...