Red Hat Enterprise Linux AI (RHEL AI) 3/sigstore
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @sigstore/core has DSSE payloadType type-binding failure | @sigstore/coreRed Hat Enterprise Linux 10/sigstore | npmRed Hat | Medium | Fix reported | |
| sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced | sigstoreExploit Intelligence/sigstore | npmRed Hat | High | Fix reported |