Skip to content
OpenAdvisories

Package · Go

github.com/sigstore/sigstore-go

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-49834

    sigstore-go: Multi-log threshold bypass via single compromised log

    sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLog(N>1) or WithSignedCertificateTimestamps(N>1) counts verified witnesses per entry or per validation path rather than per log autho…

    sigstore sigstore-go github.com/sigstore/sigstore-go sigstore-go Debian Ubuntu Go