Sigstore Sigstore-python vulnerabilities

• linuxfoundation sigstore-python sigstore has CSRF possibility in OIDC authentication during signing CVE-2026-24408 Fix available 0.0 NoneJanuary 26, 2026
• sigstore sigstore-python sigstore-python has insufficient validation of integration timestamp during verification CVE-2024-55655 Fix available 2.7 LowDecember 10, 2024