VDB
KO

GO-2026-5778

Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor

Details

Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic in github.com/sigstore/rekor

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/sigstore/rekor
Introduced in: 0.3.0 Fixed in: 1.5.2
Fix go get github.com/sigstore/rekor@v1.5.2

References