CVE-2026-48702 | Sigstore Rekor up to 1.5.1 APK File pkg/types/alpine/apk.go Package.Unmarshal allocation of resources

A vulnerability labeled as problematic has been found in Sigstore Rekor up to 1.5.1. This affects the function Package.Unmarshal of the file pkg/types/alpine/apk.go of the component APK File Handler. The manipulation results in allocation of resources. This vulnerability is known as CVE-2026-48702. It is possible to launch the attack remotely. No... Weiterlesen