Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

cosign

command

v1.13.6 Latest Latest Go to latest Published: Mar 21, 2024 License: Apache-2.0 Imports: 9 Imported by: 0

Details

There is no documentation for this package.

Path	Synopsis
cli
attach
attest
copy
dockerfile
download
fulcio
fulcio/fulcioverifier
fulcio/fulcioverifier/ctl
fulcio/fulcioverifier/ctutil Package ctutil contains utilities for Certificate Transparency.	Package ctutil contains utilities for Certificate Transparency.
generate
importkeypair
initialize
manifest
options
publickey
rekor
sign
triangulate
upload
verify