Skip to content
OpenAdvisories

Package · Wolfi

spire-agent

115 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-54787

    sigstore-go fails to check signature timestamps against a signing key's validity period

    sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which …

    sigstore sigstore-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go