Rekor code issue vulnerabilities
Rekor is an open-source software developed by sigstore. It provides an immutable, tamper-proof ledger for metadata generated within the software project supply chain. Versions of Rekor prior to 1.4.3 have code vulnerabilities. These vulnerabilities stem from the lack of initialization of sign1Msg...