GO-2024-2718 Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign...

CVE-2024-29902

Affected software: cosign (Cosign) openSUSE/SUSE advisory for cosign 2.2.4. Vulnerability summary: CVE-2024-29902 enables denial of service on the host when processing a remote image with a malicious attachment, caused by reading the attachment entirely into memory without checking its size. Larg...