Affected by GO-2023-1754 and 3 other vulnerabilities

GO-2023-1754: Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor

GO-2023-1795: malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor

GO-2026-4354: Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message in github.com/sigstore/rekor

GO-2026-4355: Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL in github.com/sigstore/rekor

jar

package

v0.2.0 Latest Latest Go to latest Published: Jun 16, 2021 License: Apache-2.0 Imports: 3 Imported by: 0

Details

View Source

const (
	KIND = "jar"
)

View Source

var VersionMap = types.NewSemVerEntryFactoryMap()

func New() types.TypeImpl

type BaseJARType struct {
	types.RekorType
}

func (bjt *BaseJARType) UnmarshalEntry(pe models.ProposedEntry) (types.EntryImpl, error)

Path	Synopsis
v0.0.1