Affected by GO-2024-2718 and 2 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

cmd/

Details

Path	Synopsis
cosign
cli
cli/attach
cli/attest
cli/copy
cli/dockerfile
cli/download
cli/fulcio
cli/fulcio/fulcioroots
cli/fulcio/fulcioverifier
cli/fulcio/fulcioverifier/ctl
cli/fulcio/fulcioverifier/ctutil Package ctutil contains utilities for Certificate Transparency.	Package ctutil contains utilities for Certificate Transparency.
cli/generate
cli/importkeypair
cli/initialize
cli/manifest
cli/options
cli/publickey
cli/rekor
cli/sign
cli/triangulate
cli/upload
cli/verify
policy_webhook command
webhook command
fig
help
sample
schema
sget
cli
cli/options