Sigstore-python (Sigstore) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-26. Vendor: Sigstore.

CVEs of Sigstore-python

• CVE-2026-24408 - CVSS 5 (medium), 2026-01-26: sigstore-python is a Python tool for generating and verifying Sigstore signatures. Prior to version 4.2.0, the sigstore-python OAuth authentication flow is…
• CVE-2024-55655 - CVSS 2.7 (low), 2024-12-10: sigstore-python is a Python tool for generating and verifying Sigstore signatures. Versions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform…