All products

Red Hat Enterprise Linux 8/sigstore

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
sigstore-js has Insufficient Verification of Data AuthenticityCVE-2026-48816 · GHSA-XGJW-PM74-86Q4 @sigstore/verifyRed Hat Enterprise Linux 10/sigstore npmRed Hat Medium Fix reported
@sigstore/core has DSSE payloadType type-binding failureCVE-2026-48758 · GHSA-JFC7-64V2-MR8C @sigstore/coreRed Hat Enterprise Linux 10/sigstore npmRed Hat Medium Fix reported