Known vulnerabilities in Rekor
Vendor:
Sigstore
Software:
Rekor
Software CPE:
cpe:2.3::sigstore:rekor:*:*:*:*:*:*:*:*
Website:
https://github.com/sigstore/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121960 - NULL Pointer Dereference CVE-2026-23831 |
CWE-476 | Medium | 1.5.0 | 23.01.2026 |
SB2026012307 |
||
| #VU121959 - Server-Side Request Forgery (SSRF) CVE-2026-24117 |
CWE-918 | Medium | 1.5.0 | 23.01.2026 |
SB2026012307 |
||
| #VU77527 - Reachable Assertion CVE-2023-33199 |
CWE-617 | Medium | 1.2.0 | 19.06.2023 |
SB2023061948 SB2023061949 |
||
| #VU76697 - Resource Management Errors CVE-2023-30551 |
CWE-399 | Medium | 1.1.1 | 31.05.2023 |
SB2023053124 SB2023053126 SB2023112447 and 1 more |