sigstore sigstore-python vulnerabilities

2 published CVEs name sigstore sigstore-python among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 1
Critical: 0
Known exploited: 0

Critical 0High 0Medium 0Low 1Not scored 1

CVEs per yearBy the year they were published

20241
20261

Newest CVEs

CVE-2026-24408
sigstore has CSRF possibility in OIDC authentication during signing
sigstore · sigstore-python
None0.0
CVE-2024-55655
sigstore-python has insufficient validation of integration timestamp during verification
sigstore · sigstore-python
Low2.7

Most common weaknesses