What’s Vulnerable › Products

sigstore-java vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your sigstore-java version is affected

Latest sigstore-java vulnerabilities

• CVE-2026-48791 — Sigstore Java has a vulnerability with bundle verification of integratedTime (CVSS 2.0)
• CVE-2024-54140 — sigstore-java has a vulnerability with bundle verification (CVSS 2.1)
• CVE-2024-53267 — Vulnerability with bundle verification in sigstore-java (CVSS 5.5)