@rootio/sigstore vulnerabilities (Root)

1 vulnerability.

• @rootio/sigstore Root sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced CVE-2026-48815 Fix available 7.5 HighJuly 1, 2026