Package · Ubuntu

golang-github-sigstore-sigstore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 2.0

CVE-2026-48791

Sigstore Java has a vulnerability with bundle verification of integratedTime

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated (Rekor entry) time) against the Fulcio certificate. Version 2.1.0 re-added this verification with enhancemen…

sigstore sigstore-java dev.sigstore:sigstore-java golang-github-sigstore-sigstore Ubuntu Maven

Aug 12, 2026