Login Request a demo
SI
Product
sigstore-python
by sigstore · last CVE Jan 26, 2026
2
CVEs
0
On KEV
5.0
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 1
Severity
All severities2Critical0High0Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add sigstore-python to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24408
5.0
0%
Jan 26
sigstore has CSRF possibility in OIDC authentication during signing
Affected: < 4.2.0
CVE-2024-55655
2.7
0%
Dec 10
sigstore-python has insufficient validation of integration timestamp during verification
Affected: >= 2.0.0, < 3.6.0
Showing 2