[ Vendor · 1 CVEs ]
sigstore
CVEs affecting sigstore published in the last 30 days, plus any sigstore CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-118763 | 29 Oct 2026 | CVSS 7.4 | @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Locationsigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a… | Fix |