Junglewise Threat Intelligence

CVE-2024-45395: GO-2024-3116 - sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

CVE-2024-45395 · Severity: low · CVSS 3.1 · Published 2024-09-06

Technologies: github.com/sigstore/sigstore-go (Go). Vendors: Go.

Executive brief

sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

Affected products

  • Go github.com/sigstore/sigstore-go

Related threats