Affected by GO-2025-4193 and 1 other vulnerabilities

GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio

pkg/

Details

Path	Synopsis
api
ca
fulcioca
googleca
challenges
client
config
ctl
generated
client
client/operations
models
restapi Package restapi Fulcio Schemes: http https Host: fulcio.sigstore.dev BasePath: /api/v1 Version: 1.0.0 Consumes: - application/json Produces: - application/pem-certificate-chain swagger:meta	Package restapi Fulcio Schemes: http https Host: fulcio.sigstore.dev BasePath: /api/v1 Version: 1.0.0 Consumes: - application/json Produces: - application/pem-certificate-chain swagger:meta
restapi/operations
log
oauthflow
pkcs11