Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-48816
  • github.com/sigstore/sigstore-js
 sigstore-js: Insufficient Verification of Data Authenticity 14 Jul
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-48758
  • github.com/sigstore/sigstore-js
 sigstore-js: DSSE payloadType type-binding failure 14 Jul
  • Fix available
  • Severity - 5.4 (Medium)
CVE-2026-48815
  • github.com/sigstore/sigstore-js
 sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced 14 Jul
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-59891
  • github.com/sigstore/sigstore-js
 Credential confusion in  @sigstore/oci  can leak registry credentials to an attacker-controlled registry 14 Jul
  • Fix available
  • Severity - 9.6 (Critical)