sigstore rekor

• CVE-2026-48702 High 7.5 Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic 0.5%
• CVE-2026-24117 Medium 5.3 Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL 0.4%
• CVE-2026-23831 Medium 5.3 Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message 0.4%
• CVE-2023-33199 Medium 5.3 malformed proposed intoto v0.0.2 entries can cause a panic in Rekor 0.7%
• CVE-2023-30551 High 7.5 Rekor's compressed archives can result in OOM conditions 1.1%