Junglewise Threat Intelligence

CVE-2025-66564: GO-2025-4192 - Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority

CVE-2025-66564 · Severity: low · CVSS 3.1 · Published 2025-12-08

Technologies: github.com/sigstore/timestamp-authority/v2 (Go), github.com/sigstore/timestamp-authority (Go). Vendors: Go.

Executive brief

Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority

Affected products

  • Go github.com/sigstore/timestamp-authority/v2
  • Go github.com/sigstore/timestamp-authority

Related threats