Junglewise Threat Intelligence

CVE-2023-47122: GO-2023-2332 - Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

CVE-2023-47122 · Severity: low · CVSS 3.1 · Published 2024-08-21

Technologies: github.com/sigstore/gitsign (Go). Vendors: Go.

Executive brief

Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

Affected products

  • Go github.com/sigstore/gitsign

Related threats