Improper input validation in Sigstore Sigstore-java

CVE-2024-54140

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (11.3th percentile) — read the EPSS interpretation.