Affected by GO-2025-4192
and 2 other vulnerabilities
GO-2025-4192: Sigstore Timestamp Authority allocates excessive memory during request parsing in github.com/sigstore/timestamp-authority
GO-2026-5763: Sigstore Timestamp Authority has Improper Certificate Validation in verifier in github.com/sigstore/timestamp-authority
GO-2026-5851: Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality in github.com/sigstore/timestamp-authority

The highest tagged major version is
v2.
command
Version:
v1.2.9
Opens a new window with list of versions in this module.
Published: Sep 8, 2025
License: Apache-2.0
Opens a new window with license information.
Imports: 26
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Click to show internal directories.
Click to hide internal directories.