Junglewise Threat Intelligence

CVE-2025-66506: GO-2025-4193 - Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

CVE-2025-66506 · Severity: low · CVSS 3.1 · Published 2025-12-08

Technologies: github.com/sigstore/fulcio (Go). Vendors: Go.

Executive brief

Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

Affected products

Go github.com/sigstore/fulcio

Related threats

Sigstore Fulcio SSRF and Token Leakage in OIDC Discovery
GO-2026-4311 - Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio