@sigstore/sign vulnerabilities (TuxCare)

1 vulnerability.

• @sigstore/sign TuxCare sigstore-js: DSSE payloadType type-binding failure CVE-2026-48758 Fix available 5.4 MediumJune 26, 2026