CLEANSTART-2026-BA61304

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BA61304.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-BA61304
Upstream
  • CVE-2025-58183
  • CVE-2025-58186
  • CVE-2025-61725
  • ghsa-273p-m2cw-6833
  • ghsa-2x5j-vhc8-9cwm
  • ghsa-4c4x-jm2x-pf9j
  • ghsa-4qg8-fj49-pxjh
  • ghsa-59jp-pj84-45mr
  • ghsa-6m8w-jc87-6cr7
  • ghsa-6v2p-p543-phr9
  • ghsa-78h2-9frx-2jm8
  • ghsa-846p-jg2w-w324
  • ghsa-9h8m-3fm2-qjrq
  • ghsa-c6gw-w398-hv78
  • ghsa-f6x5-jh6r-wrfv
  • ghsa-f83f-xpx7-ffpw
  • ghsa-fcv2-xgw5-pqxf
  • ghsa-fphv-w9fq-2525
  • ghsa-hcg3-q754-cr77
  • ghsa-j5w8-q4qc-rx2x
  • ghsa-jqc5-w2xx-5vq4
  • ghsa-mh63-6h87-95cp
  • ghsa-mqqf-5wvp-8fh8
  • ghsa-p436-gjf2-799p
  • ghsa-p77j-4mvh-x3m3
  • ghsa-q9hv-hpm4-hj6x
  • ghsa-qxp5-gwg8-xv66
  • ghsa-vvgc-356p-c3xw
Published
2026-07-30T07:10:53Z
Modified
2026-09-04T13:31:08Z
Summary
Security fixes in cosign 2.4.3-r0
Details

Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

References

Affected packages

CleanStart / cosign

Package

Name
cosign

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.3-r0

Affected versions

2.*
2.4.3-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BA61304.json"