Sigstore Sigstore-go vulnerabilities
- sigstore sigstore-gosigstore-go fails to check signature timestamps against a signing key's validity period3.1 Low
- sigstore sigstore-gosigstore-go: Multi-log threshold bypass via single compromised log5.9 Medium
- sigstore sigstore-goUnbounded loop over untrusted input can lead to endless data attack3.1 Low