{"id":"EUVD-2025-201319","revision":"e53194c15564435590a3a53684c99bb3","records":[{"revision":"e53194c15564435590a3a53684c99bb3","observedAt":"2026-11-01T01:15:18.272+00:00","statement":{"source":"euvd","id":"EUVD-2025-201319","aliases":["CVE-2025-66564","GHSA-4qg8-fj49-pxjh"],"title":"Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similar…","description":"Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://github.com/sigstore/timestamp-authority/security/advisories/GHSA-4qg8-fj49-pxjh","https://github.com/sigstore/timestamp-authority/commit/0cae34e197d685a14904e0bad135b89d13b69421"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-201319","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 4, 2025, 10:37:13 PM","dateUpdated":"Dec 5, 2025, 2:55:53 PM"},"relatedAdvisories":[{"id":"RHSA-2026:2144","title":"Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2025-61729","CVE-2025-64756","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2025-66564","CVE-2026-21441","CVE-2026-22772","CVE-2026-22774","CVE-2026-22775","CVE-2026-23745","CVE-2026-23950"]},{"id":"RHSA-2026:1517","title":"Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-61729","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:3825","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3","vulnerabilityIds":["CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-66506","CVE-2025-66564"]},{"id":"RHSA-2026:3710","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3","vulnerabilityIds":["CVE-2024-37890","CVE-2025-6545","CVE-2025-6547","CVE-2025-9287","CVE-2025-9288","CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564"]},{"id":"RHSA-2026:2568","title":"Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:3087","title":"Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-66564","CVE-2026-22029","CVE-2026-25639"]},{"id":"RHSA-2026:2350","title":"Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:3712","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4","vulnerabilityIds":["CVE-2024-37890","CVE-2025-6545","CVE-2025-6547","CVE-2025-9287","CVE-2025-9288","CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564"]},{"id":"openSUSE-SU-2026:20191-1","title":"Security update for trivy","vulnerabilityIds":["CVE-2025-64702","CVE-2025-66564"]},{"id":"openSUSE-SU-2026:10131-1","title":"trivy-0.69.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-64702","CVE-2025-66564"]},{"id":"RHSA-2026:2852","title":"Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2025-66506","CVE-2025-66564"]},{"id":"RHSA-2026:3827","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3","vulnerabilityIds":["CVE-2025-11621","CVE-2025-12044","CVE-2025-47913","CVE-2025-61729","CVE-2025-66506","CVE-2025-66564"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-201319","identifiers":["EUVD-2025-201319","CVE-2025-66564","GHSA-4qg8-fj49-pxjh"]},"retained":false,"historicalAffected":[]}],"coverage":[]}