CVE-2025-66564

3 advisories.

Go/github.com/sigstore/timestamp-authority CVE-2025-66564: high 7.5

Sigstore Timestamp Authority allocates excessive memory during request parsing

Action: Upgrade github.com/sigstore/timestamp-authority to 2.0.3 or later.

go get github.com/sigstore/timestamp-authority@v2.0.3

introduced	fixed	last affected
0	2.0.3	-

2.0.3

CVE-2025-66564 · published 2025-12-05T18:19:00Z · modified 2026-09-10T03:50:31.413997158Z · JSON

Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2025-66564 · published 2025-12-08T21:31:36Z · modified 2026-02-04T03:13:38.955698Z · JSON

Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority

Action: Upgrade github.com/sigstore/timestamp-authority/v2 to 2.0.3 or later.

go get github.com/sigstore/timestamp-authority/v2@v2.0.3

introduced	fixed	last affected
0	2.0.3	-

2.0.3

CVE-2025-66564 · published 2025-12-08T21:31:36Z · modified 2026-02-04T03:13:38.955698Z · JSON