Sigstore Sigstore-java
3 CVEs affecting Sigstore Sigstore-java. Latest disclosed: 2026-08-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53267 | Medium | 5.5 | 2024-11-26 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a valid… |
CVE-2026-48791 | Low | 2.0 | 2026-08-13 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated (Rekor e… |
CVE-2024-54140 | | 2024-12-05 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundl… |