Red Hat Security Advisory

RHSA-2026:47891

Red Hat Hardened Images RPMs Security Update

Released 2026-07-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2026-36738 CVE-2026-49834 · GHSA-9vcr-p3rj-q5q6

LOW 32

sigstore-go is a Go library for Sigstore signing and verification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00181 Published 2026-07-17 Partial fix · 1.2.0 CWE-347

TI-2026-39593 CVE-2026-54787 · GHSA-wqqc-jjcq-vfxm

LOW 14

sigstore-go is a Go library for Sigstore signing and verification.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00134 Published 2026-07-31 Fixed in 1.2.1 CWE-324