CVE-2026-48702
2 advisories.
Go/github.com/sigstore/rekor CVE-2026-48702: high 7.5, EPSS 0.46%
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
Action: Upgrade github.com/sigstore/rekor to 1.5.2 or later.
go get github.com/sigstore/rekor@v1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 1.5.2 | - |
Fixed versions
| 1.5.2 |
Sources
- osv: GHSA-47q9-m4ww-924m
- https://github.com/sigstore/rekor/security/advisories/GHSA-47q9-m4ww-924m
- https://github.com/sigstore/rekor
CVE-2026-48702 · published · modified · JSON
Go/github.com/sigstore/rekor CVE-2026-48702: unknown, EPSS 0.46%
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor
Action: Upgrade github.com/sigstore/rekor to 1.5.2 or later.
go get github.com/sigstore/rekor@v1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 1.5.2 | - |
Fixed versions
| 1.5.2 |
Sources
CVE-2026-48702 · published · modified · JSON