tocsin

CVE-2023-33199

2 advisories.

Go/github.com/sigstore/rekor CVE-2023-33199: medium 5.3

malformed proposed intoto entries can cause a panic

Action: Upgrade github.com/sigstore/rekor to 1.2.0 or later.

go get github.com/sigstore/rekor@v1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2023-33199 · published · modified · JSON

Go/github.com/sigstore/rekor CVE-2023-33199: unknown

malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor

Action: Upgrade github.com/sigstore/rekor to 1.2.0 or later.

go get github.com/sigstore/rekor@v1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2023-33199 · published · modified · JSON