Product by Sigstore
Gitsign
4 known vulnerabilities in Gitsign (Sigstore), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-44310 | gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers | 5.4 | |
| Medium | CVE-2026-44309 | Sigstore Gitsign: Improper Certificate Validation | 5.3 | |
| Medium | CVE-2023-47122 | Sigstore Gitsign: Improper Verification of Cryptographic Signature | 4.2 | |
| Low | CVE-2024-51746 | Use of incorrect Rekor entries during verification in gitsign | — |