MEDIUM5.9Go
GHSA-9c54-x2g4-v92j· CVE-2026-49835, GO-2026-5851Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality
Modified: 9/10/2026
package
Go/github.com/sigstore/timestamp-authority/v2
pkg:go/github.com/sigstore/timestamp-authority/v2
MEDIUM5.5Go
GHSA-xm5m-wgh2-rrg3· CVE-2026-39984, GO-2026-5763Sigstore Timestamp Authority has Improper Certificate Validation in verifier
Modified: 9/10/2026
—Go
GO-2025-4192· CVE-2025-66564, GHSA-4qg8-fj49-pxjhSigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority
Modified: 2/4/2026
—Go
GO-2026-5763· CVE-2026-39984, GHSA-xm5m-wgh2-rrg3Sigstore Timestamp Authority has Improper Certificate Validation in verifier in github.com/sigstore/timestamp-authority
Modified: 6/26/2026
—Go
GO-2026-5851· CVE-2026-49835, GHSA-9c54-x2g4-v92jSigstore Timestamp Authority has OOM due to unbounded metric label cardinality in github.com/sigstore/timestamp-authority
Modified: 7/8/2026