sigstore vulnerabilities (Root)

1 vulnerability.

• sigstore Root sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced CVE-2026-48815 Fix available 7.5 HighJuly 1, 2026