Github.Com Sigstore Sigstore-Go vulnerabilities

CVE-2024-45395 [LOW] CWE-835 sigstore-go has an unbounded loop over untrusted input can lead to endless data attack sigstore-go has an unbounded loop over untrusted input can lead to endless data attack ### Impact sigstore-go is susceptible to a denial of service attack when a verifier is provided a maliciously crafted Sigstore Bundle containing large amounts of verifiable data, in the form of signed transparency log entries, RFC 3161 timestamps, and attestation subjects. The verification of t