Moderate severity5.4NVD Advisory· Published Jun 26, 2026

sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

CVE-2026-48758

Description

Sigstore/Sigstorellm-fuzzy
osv-coords2 versions
pkg:apk/chainguard/pulumi-language-nodejs pkg:apk/wolfi/pulumi-language-nodejs
< 3.248.0-r1+ 1 more
- (no CPE)range: < 3.248.0-r1
- (no CPE)range: < 3.248.0-r1

No linked articles in our index yet.