sigstore
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| sigstore has insufficient validation of integration timestamp during verification | sigstore | PyPI | Low | Fix reported | |
| sigstore CSRF possibility in OIDC authentication during signing | sigstore | PyPI | Low | Fix reported |