sigstore vulnerabilities (npm)

1 vulnerability.

• sigstore npm sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced CVE-2026-48815 Fix available 7.5 HighJuly 1, 2026