Red Hat Connectivity Link 1/sigstore
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced | sigstoreExploit Intelligence/sigstore | npmRed Hat | High | Fix reported |