CVE-2026-48791
LOW SEVERITYCVSS Score & Metrics
Base Score
2.0 / 10
Vulnerability Description
Sigstore Java has a vulnerability with bundle verification of integratedTime
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
maven
Product
dev.sigstore:sigstore-java
External References
- https://github.com/sigstore/sigstore-java/security/advisories/GHSA-qqw8-7c2r-jxch
- https://github.com/sigstore/sigstore-java/pull/1008
- https://github.com/sigstore/sigstore-java/pull/1185
- https://github.com/sigstore/sigstore-java/commit/4b7a49ebb1813f5b1ff113bcad63246358222d61
- https://github.com/sigstore/sigstore-java/commit/b529335728fc5cfb574161b4b3c06859a8a2aa88
- https://github.com/advisories/GHSA-qqw8-7c2r-jxch
Discussion (0)
Add Comment
No comments yet. Be the first!