sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 6 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-347.
Summary
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify() is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications relying on certificateOIDs to restrict which certificates may sign artifacts can accept unauthorized certificates. This issue is fixed in version 4.1.1.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| sigstore | sigstore-js | before 4.1.1 | 4.1.1 | Patch available | CNA |
| — | sigstore (npm) | before 4.1.1 | 4.1.1 | Patch available | GHSA-52v5-jr5w-gjxr |
- sigstore-js Vendorsigstore Affected before 4.1.1 Fixed in 4.1.1 Patch available CNA
- sigstore (npm) Vendor— Affected before 4.1.1 Fixed in 4.1.1 Patch available GHSA-52v5-jr5w-gjxr
Remediation
- Fix · CNA sigstore-js (sigstore) Fixed in 4.1.1
- Fix · GHSA-52v5-jr5w-gjxr sigstore (npm) Fixed in 4.1.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Exploit Intelligence | Affected | No fix yet |
| Red Hat Connectivity Link 1 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 10 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 9 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
Not affected: 9 products
- Exploit Intelligence
- Red Hat Connectivity Link 1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift Dev Spaces
- Red Hat Satellite 6
- Self-service automation portal 2
Timeline
- 2026-10-02 Threatist record created from CVE-2026-48815
- 2026-10-03 Alias added: GHSA-52v5-jr5w-gjxr
References
Other 5
- https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr
- https://github.com/sigstore/sigstore-js/pull/1658
- https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b
- https://github.com/sigstore/sigstore-js/releases/tag/sigstore%404.1.1
- https://github.com/sigstore/sigstore-js
More sigstore vulnerabilities
- TI-2022-16356 False positive signature verification in cosign CVSS 3.1CRITICAL 9.8
- TI-2024-19670 Cosign vulnerable to machine-wide denial of service via malicious artifacts CVSS 3.1HIGH 7.5
- TI-2026-18290 Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass CVSS 3.1MEDIUM 5.8
- TI-2026-36085 sigstore-js: Insufficient Verification of Data Authenticity CVSS 3.1MEDIUM 6.5
- TI-2024-19669 Cosign vulnerable to system-wide denial of service via malicious attachments CVSS 3.1MEDIUM 5.9
- TI-2026-36028 sigstore-js: DSSE payloadType type-binding failure CVSS 3.1MEDIUM 5.4
Sources
- CVE-2026-48815 · CVE Program
- CVE-2026-48815 · NVD
- FIRST EPSS
- GHSA-52v5-jr5w-gjxr · GitHub Advisory Database · CC BY 4.0
- CVE-2026-48815 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences