# cve.now: Sigstore

The newest entries naming Sigstore as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-118763](https://cve.now/CVE-2026-118763.md): @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location (CVSS 7.4)
- [CVE-2026-48702](https://cve.now/CVE-2026-48702.md): Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic (CVSS 7.5)
- [CVE-2026-49478](https://cve.now/CVE-2026-49478.md): Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage (CVSS 8.7)
- [CVE-2026-48791](https://cve.now/CVE-2026-48791.md): Sigstore Java has a vulnerability with bundle verification of integratedTime (CVSS 2.0)
- [CVE-2026-54787](https://cve.now/CVE-2026-54787.md): sigstore-go fails to check signature timestamps against a signing key's validity period (CVSS 3.1)
- [CVE-2026-49834](https://cve.now/CVE-2026-49834.md): sigstore-go: Multi-log threshold bypass via single compromised log (CVSS 5.9)
- [CVE-2026-49835](https://cve.now/CVE-2026-49835.md): Sigstore Timestamp Authority: OOM due to unbounded metric label cardinality (CVSS 5.9)
- [CVE-2026-48816](https://cve.now/CVE-2026-48816.md): sigstore-js: Insufficient Verification of Data Authenticity (CVSS 6.5)
- [CVE-2026-48758](https://cve.now/CVE-2026-48758.md): sigstore-js: DSSE payloadType type-binding failure (CVSS 5.4)
- [CVE-2026-48815](https://cve.now/CVE-2026-48815.md): sigstore-js: \`certificateOIDs\` verification constraints are silently dropped and never enforced (CVSS 7.5)
- [CVE-2026-59891](https://cve.now/CVE-2026-59891.md): Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry (CVSS 9.6)
- [CVE-2026-44309](https://cve.now/CVE-2026-44309.md): gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits (CVSS 5.3)
- [CVE-2026-44310](https://cve.now/CVE-2026-44310.md): gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers (CVSS 5.4)
- [CVE-2026-39984](https://cve.now/CVE-2026-39984.md): Sigstore Timestamp Authority has Improper Certificate Validation in verifier (CVSS 5.5)
- [CVE-2026-39395](https://cve.now/CVE-2026-39395.md): Cosign's verify-blob-attestation reports false positive when payload parsing fails (CVSS 4.3)
- [CVE-2026-31830](https://cve.now/CVE-2026-31830.md): sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest (CVSS 7.5)
- [CVE-2026-24122](https://cve.now/CVE-2026-24122.md): Cosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked (CVSS 3.7)
- [CVE-2026-24408](https://cve.now/CVE-2026-24408.md): sigstore has CSRF possibility in OIDC authentication during signing (CVSS 0.0)
- [CVE-2026-24137](https://cve.now/CVE-2026-24137.md): sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal (CVSS 5.8)
- [CVE-2026-24117](https://cve.now/CVE-2026-24117.md): Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL (CVSS 5.3)
- [CVE-2026-23831](https://cve.now/CVE-2026-23831.md): Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message (CVSS 5.3)
- [CVE-2026-22772](https://cve.now/CVE-2026-22772.md): Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass (CVSS 5.8)
- [CVE-2026-22703](https://cve.now/CVE-2026-22703.md): Cosign verification accepts any valid Rekor entry under certain conditions (CVSS 5.5)
- [CVE-2025-66564](https://cve.now/CVE-2025-66564.md): Sigstore Timestamp Authority allocates excessive memory during request parsing (CVSS 7.5)
- [CVE-2025-66506](https://cve.now/CVE-2025-66506.md): Fulcio allocates excessive memory during token parsing (CVSS 7.5)
- [CVE-2024-55655](https://cve.now/CVE-2024-55655.md): sigstore-python has insufficient validation of integration timestamp during verification (CVSS 2.7)
- [CVE-2024-54140](https://cve.now/CVE-2024-54140.md): sigstore-java has a vulnerability with bundle verification (CVSS 2.1)
- [CVE-2024-53267](https://cve.now/CVE-2024-53267.md): Vulnerability with bundle verification in sigstore-java (CVSS 5.5)
- [CVE-2024-51746](https://cve.now/CVE-2024-51746.md): Use of incorrect Rekor entries during verification in gitsign (CVSS 1.8)
- [CVE-2024-45395](https://cve.now/CVE-2024-45395.md): Unbounded loop over untrusted input can lead to endless data attack (CVSS 3.1)
- [CVE-2024-29903](https://cve.now/CVE-2024-29903.md): Cosign vulnerable to machine-wide denial of service via malicious artifacts (CVSS 4.2)
- [CVE-2024-29902](https://cve.now/CVE-2024-29902.md): Cosign vulnerable to system-wide denial of service via malicious attachments (CVSS 4.2)
- [CVE-2023-47122](https://cve.now/CVE-2023-47122.md): Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. (CVSS 4.2)
- [CVE-2023-46737](https://cve.now/CVE-2023-46737.md): Possible endless data attack from attacker-controlled registry in cosign (CVSS 3.1)
- [CVE-2023-33199](https://cve.now/CVE-2023-33199.md): malformed proposed intoto v0.0.2 entries can cause a panic in Rekor (CVSS 5.3)
- [CVE-2023-30551](https://cve.now/CVE-2023-30551.md): Rekor's compressed archives can result in OOM conditions (CVSS 7.5)
- [CVE-2022-36056](https://cve.now/CVE-2022-36056.md): Vulnerabilities with blob verification in sigstore cosign (CVSS 5.5)
- [CVE-2022-35930](https://cve.now/CVE-2022-35930.md): Ability to bypass attestation verification in sigstore PolicyController (CVSS 7.1)
- [CVE-2022-35929](https://cve.now/CVE-2022-35929.md): False positive signature verification in cosign (CVSS 7.1)
- [CVE-2022-23649](https://cve.now/CVE-2022-23649.md): Improper Certificate Validation in Cosign (CVSS 3.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sigstore
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.