golang-github-sigstore-sigstore vulnerabilities (Ubuntu)

2 vulnerabilities.

• golang-github-sigstore-sigstore Ubuntu Sigstore Java has a vulnerability with bundle verification of integratedTime CVE-2026-48791 Fix available 2.0 LowJune 30, 2026
• golang-github-sigstore-sigstore Ubuntu sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal CVE-2026-24137 Fix available 5.8 MediumJanuary 22, 2026