sigstore vulnerabilities (PyPI)

2 vulnerabilities.

• sigstore PyPI sigstore has CSRF possibility in OIDC authentication during signing CVE-2026-24408 Fix available 0.0 NoneJanuary 26, 2026
• sigstore PyPI sigstore-python has insufficient validation of integration timestamp during verification CVE-2024-55655 Fix available 2.7 LowDecember 10, 2024