{"id":"GO-2025-4193","revision":"ffbf84c15f1f4e738c86fdf38394065d","records":[{"revision":"ffbf84c15f1f4e738c86fdf38394065d","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4193","aliases":["CVE-2025-66506","GHSA-f83f-xpx7-ffpw"],"title":"Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio","description":"Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio","state":0,"publishedAt":"2025-12-08T21:31:36+00:00","modifiedAt":"2026-02-04T03:55:44.700916+00:00","affected":[{"ecosystem":"Go","name":"github.com/sigstore/fulcio","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.8.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw","https://nvd.nist.gov/vuln/detail/CVE-2025-66506","https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4193","license":"OSV · upstream source license applies","key":"osv:GO-2025-4193","identifiers":["GO-2025-4193","CVE-2025-66506","GHSA-f83f-xpx7-ffpw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}