Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

cmd/

Details

Path	Synopsis
cosign
cli
cli/attach
cli/attest
cli/copy
cli/dockerfile
cli/download
cli/fulcio
cli/fulcio/fulcioverifier
cli/fulcio/fulcioverifier/ctl
cli/fulcio/fulcioverifier/ctutil Package ctutil contains utilities for Certificate Transparency.	Package ctutil contains utilities for Certificate Transparency.
cli/generate
cli/importkeypair
cli/initialize
cli/manifest
cli/options
cli/publickey
cli/rekor
cli/sign
cli/triangulate
cli/upload
cli/verify
help
sample
sget
cli Deprecated: This package is deprecated and will be removed in a future release.	Deprecated: This package is deprecated and will be removed in a future release.
cli/options Deprecated: This package is deprecated and will be removed in a future release.	Deprecated: This package is deprecated and will be removed in a future release.