github.com/sigstore/sigstore-go vulnerabilities (Go)

3 vulnerabilities.

• github.com/sigstore/sigstore-go Go sigstore-go fails to check signature timestamps against a signing key's validity period CVE-2026-54787 Fix available 3.1 LowJuly 31, 2026
• github.com/sigstore/sigstore-go Go sigstore-go: Multi-log threshold bypass via single compromised log CVE-2026-49834 Fix available 5.9 MediumJuly 9, 2026
• github.com/sigstore/sigstore-go Go Unbounded loop over untrusted input can lead to endless data attack CVE-2024-45395 Fix available 3.1 LowSeptember 4, 2024