Product by Sigstore
Sigstore sigstore-go
3 known vulnerabilities in Sigstore sigstore-go (Sigstore), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-49834 | sigstore-go: Multi-log threshold bypass via single compromised log | 7.5 | |
| Low | CVE-2026-54787 | sigstore-go fails to check signature timestamps against a signing key's validity period | 3.1 | |
| High | CVE-2024-45395 | Unbounded loop over untrusted input can lead to endless data attack | 3.1 |