{"action":"Upgrade rekor to 1.1.1-r0 or later.","affected":[{"fixed":"1.1.1-r0","introduced":"0"}],"component":"rekor","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["1.1.1-r0"],"id":"tcs_01M6H5AACN0848FMPXJGXMZHZ7","modified_at":"2026-11-03T06:32:59.095017252Z","published_at":"2023-05-08T16:15:09.453Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-30551","https://security.alpinelinux.org/vuln/CVE-2023-30551"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-30551","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-30551"}],"summary":"Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata files into memory withou"}