Vulnerabilidades de linuxfoundation fulcio (CVE)

Registros CVE publicados para linuxfoundation fulcio, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
7.5Alta
CVE-2025-66506

Fulcio allocates excessive memory during token parsing

sigstore fulcio

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.3, function identity.extractIssuerURL splits (via a call to strings.Split) its argument (which is untrusted data) on period…