RE
Product
rekor
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add rekor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48702 | 7.5 | Aug 13 | Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic Affected: >= 0.3.0, < 1.5.2 |
| CVE-2023-30551 | 7.5 | May 8 | Rekor's compressed archives can result in OOM conditions Affected: < 1.1.1 |
| CVE-2026-24117 | 5.3 | Jan 22 | Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL Affected: < 1.5.0 |
| CVE-2026-23831 | 5.3 | Jan 22 | Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message Affected: < 1.5.0 |
| CVE-2023-33199 | 5.3 | May 26 | malformed proposed intoto v0.0.2 entries can cause a panic in Rekor Affected: < 1.2.0 |
Showing 5