https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T06:21:51.979106+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-10T06:21:51.983919+00:00 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-210511 EUVD-2026-210511 2026-10-10T06:21:51.983955+00:00 EUVD-2026-210511 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33199 fkie_cve-2023-33199 2026-10-10T06:21:51.983969+00:00

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal. This has been fixed in v1.2.0 of Rekor. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-frqx-jfcm-6jjr GHSA-frqx-jfcm-6jjr — malformed proposed intoto entries can cause a panic 2026-10-10T06:21:51.984000+00:00

Affected: Go: github.com/sigstore/rekor

### Impact A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal.

### Patches This is fixed in v1.2.0 of Rekor.

### Workarounds No

### References Discovered by OSS-Fuzz

 https://cve.radiocsirt.org/vuln/gsd-2023-33199 gsd-2023-33199 2026-10-10T06:21:51.984031+00:00 gsd-2023-33199 https://cve.radiocsirt.org/vuln/msrc_cve-2023-33199 msrc_CVE-2023-33199 — malformed proposed intoto v0.0.2 entries can cause a panic in Rekor 2026-10-10T06:21:51.984044+00:00 msrc_CVE-2023-33199 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12965-1 openSUSE-SU-2024:12965-1 — rekor-1.2.1-1.1 on GA media 2026-10-10T06:21:51.984058+00:00

rekor-1.2.1-1.1 on GA media