CVE-2026-49478
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.7 / 10
Vulnerability Description
Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
go
Product
github.com/sigstore/fulcio
Discussion (0)
Add Comment
No comments yet. Be the first!