https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:58:46 +0000 https://cve.radiocsirt.org/vuln/cve-2025-61729 <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> https://cve.radiocsirt.org/vuln/cve-2025-61729 https://cve.radiocsirt.org/vuln/ghsa-273p-m2cw-6833 <p><strong>Affected:</strong> Go: github.com/sigstore/rekor</p> <p>## Summary</p> <p>Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty `spec.message`. `validate()` returns nil (success) when `message` is empty, leaving `sign1Msg` uninitialized, and `Canonicalize()` later dereferences `v.sign1Msg.Payload`.</p> <p>## Impact</p> <p>A malformed proposed entry of the `cose/v0.0.1` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal.</p> <p>## Patches</p> <p>Upgrade to v1.5.0</p> <p>## Workarounds</p> <p>None</p> <p><strong>Affected:</strong> Go: github.com/sigstore/rekor</p> <p>## Summary</p> <p>Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty `spec.message`. `validate()` returns nil (success) when `message` is empty, leaving `sign1Msg` uninitialized, and `Canonicalize()` later dereferences `v.sign1Msg.Payload`.</p> <p>## Impact</p> <p>A malformed proposed entry of the `cose/v0.0.1` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal.</p> <p>## Patches</p> <p>Upgrade to v1.5.0</p> <p>## Workarounds</p> <p>None</p> https://cve.radiocsirt.org/vuln/ghsa-273p-m2cw-6833