Junglewise Threat Intelligence

CVE-2024-51746: GO-2024-3252 - gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

CVE-2024-51746 · Severity: medium · CVSS 4 · Published 2024-11-06

Technologies: github.com/sigstore/gitsign (Go). Vendors: Go.

Executive brief

gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Affected products

  • Go github.com/sigstore/gitsign

Related threats