Sigstore Timestamp Authority (Linuxfoundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 34 known versions, newest CVE from 2026-07-17. Vendor: Linuxfoundation.

CVEs of Sigstore Timestamp Authority

• CVE-2026-49835 - CVSS 7.5 (high), 2026-07-17: Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path…
• CVE-2026-39984 - CVSS 5.5 (medium), 2026-04-15: Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the…
• CVE-2025-66564 - CVSS 7.5 (high), 2025-12-04: Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to…