Vulnerabilities > Sigstore > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-04-10 | CVE-2024-29902 | Allocation of Resources Without Limits or Throttling vulnerability in Sigstore Cosign Cosign provides code signing and transparency for containers and binaries. | 5.9 |
| 2023-11-10 | CVE-2023-47122 | Unspecified vulnerability in Sigstore Gitsign 0.6.0/0.7.0/0.7.1 Gitsign is software for keyless Git signing using Sigstore. | 5.3 |
| 2023-11-07 | CVE-2023-46737 | Infinite Loop vulnerability in Sigstore Cosign Cosign is a sigstore signing tool for OCI containers. | 5.3 |
| 2022-09-14 | CVE-2022-36056 | Unspecified vulnerability in Sigstore Cosign Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure. | 5.5 |