sigstore Sigstore Java Vulnerabilities

Sigstore Sigstore-java vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

5 December 2024

Invalid Signature for a Checkpoint
CVE-2024-54140
SigstoreSigstore-java

26 November 2024

Insufficient Verification for Mismatched Bundles in sigstore-java Leads to Vulnerability
CVE-2024-53267
SigstoreSigstore-java5.5MEDIUM