sigstore

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

sigstore records in CISA KEV

No sigstore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Sigstore · all components

TI-2026-24383 CVE-2026-31830 · GHSA-mhg6-2q2v-9h2c

LOW 39

sigstore-ruby is a pure Ruby implementation of the sigstore verify command from the sigstore/cosign project.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-03-10 Fixed in 0.2.3 CWE-252