Go CVE Archive

github.com/sigstore/timestamp-authority/v2 CVE Vulnerabilities

All known CVEs affecting github.com/sigstore/timestamp-authority/v2. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-49835
Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality
Medium
CVE-2026-39984
Sigstore Timestamp Authority has Improper Certificate Validation in verifier
Medium

Prioritize github.com/sigstore/timestamp-authority/v2 vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo