Alpine/rekor: high 7.5
Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata files into memory withou
Action: Upgrade rekor to 1.1.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1-r0 | - |
Fixed versions
| 1.1.1-r0 |
Sources
published · modified · JSON