sigstore Latest Vulnerabilities
Latest vulnerabilities published by sigstore
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Vulnerability in Sigstore Signing Library Allows Expired Key Use
CVE-2026-54787SigstoreSigstore-go3.1LOWGo Library Vulnerability in Sigstore Signing and Verification Tool
CVE-2026-49834SigstoreSigstore-go5.9MEDIUMUnauthenticated Remote Access Vulnerability in Sigstore Timestamp Authority Service
CVE-2026-49835SigstoreTimestamp-authority5.9MEDIUMJavaScript Library Vulnerability in Sigstore Services
CVE-2026-48816SigstoreSigstore-js6.5MEDIUMJavaScript Library Vulnerability in Sigstore Services by Sigstore
CVE-2026-48758SigstoreSigstore-js5.4MEDIUMCertificate Validation Issue in Sigstore.js JavaScript Library
CVE-2026-48815SigstoreSigstore-js7.5HIGHCredential Exposure in JavaScript Library by Sigstore
CVE-2026-59891SigstoreSigstore-js👾🟡9.6CRITICALKeyless Signing Tool Vulnerability in Gitsign by Sigstore
CVE-2026-44309SigstoreGitsign5.3MEDIUMIndex-Out-Of-Range Vulnerability in Gitsign's CertVerifier.Verify() Function
CVE-2026-44310SigstoreGitsign5.4MEDIUMAuthorization Bypass in Sigstore Timestamp Authority Affects Multiple Versions
CVE-2026-39984SigstoreTimestamp-authority5.5MEDIUMCode Signing Vulnerability in Cosign by Sigstore
CVE-2026-39395SigstoreCosign4.3MEDIUMInsecure Artifact Verification in sigstore-ruby by Sigstore
CVE-2026-31830SigstoreSigstore-ruby7.5HIGHVulnerability in Cosign Code Signing Tool by Sigstore
CVE-2026-24122SigstoreCosign3.7LOWCross-Site Request Forgery in Sigstore-Python Auth Flow Vulnerability
CVE-2026-24408SigstoreSigstore-pythonNONEFile Overwrite Vulnerability in Sigstore Framework - Go Library by Sigstore
CVE-2026-24137SigstoreSigstore5.8MEDIUMSSRF Vulnerability in Rekor Software Supply Chain Transparency Log
CVE-2026-24117SigstoreRekor5.3MEDIUMSoftware Supply Chain Vulnerability in Rekor by Sigstore
CVE-2026-23831SigstoreRekor5.3MEDIUMSSRF Vulnerability in Fulcio Certificate Authority Software
CVE-2026-22772SigstoreFulcio5.8MEDIUMVulnerability in Cosign Affects Container Code Signing and Transparency
CVE-2026-22703SigstoreCosign5.5MEDIUMInput Validation Flaw in Sigstore Timestamp Authority Affects Multiple Versions
CVE-2025-66564SigstoreTimestamp-authority7.5HIGHParsing Vulnerability in Fulcio Certificate Authority from Sigstore
CVE-2025-66506SigstoreFulcio7.5HIGHInsufficient Integration Time Validation in sigstore-python Prior to 3.6.0
CVE-2024-55655SigstoreInvalid Signature for a Checkpoint
CVE-2024-54140SigstoreSigstore-javaInsufficient Verification for Mismatched Bundles in sigstore-java Leads to Vulnerability
CVE-2024-53267SigstoreSigstore-java5.5MEDIUMGitsign Sigstore Vulnerability Could Lead to Signature Verification Bypass
CVE-2024-51746SigstoreGitsign