CVE-2023-30551

CVE-2023-30551 is an out-of-memory (OOM) vulnerability affecting Rekor, an open-source software supply chain transparency log, prior to version 1.1.1. This flaw allows an attacker to trigger a crash by submitting specially crafted JAR or APK files with large metadata files, causing Rekor to consume excessive memory. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network without authentication or user interaction, leading to a denial-of-service (DoS) impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.