github.com/sigstore/sigstore
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal | github.com/sigstore/sigstoreAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 | GoRed Hat | Medium | Fix reported |