rekor-1.5.0-1.1 on GA media
rekor-1.5.0-1.1 on GA media
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-24117US | — | — | ||
Rekor is a software supply chain transparency log. In versions 1.4.3 and below, attackers can trigger SSRF to arbitrary internal services because /api/v1/index/retrieve supports re… | ||||
| CVE-2026-23831US | — | — | ||
Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry… | ||||
| CVE-2025-58181US | — | — | ||
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- Fixedrekor-0:1.5.0-1.1.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedrekor-0:1.5.0-1.1.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan