Moderate severity5.9NVD Advisory· Published Jul 1, 2026

sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

CVE-2026-48815

Description

sigstore: Sigstore: Unauthorized certificates accepted due to ignored certificateOIDs verification option

Sigstore/Sigstorellm-fuzzy
osv-coords2 versions
pkg:apk/chainguard/pulumi-language-nodejs pkg:apk/wolfi/pulumi-language-nodejs
< 3.248.0-r2+ 1 more
- (no CPE)range: < 3.248.0-r2
- (no CPE)range: < 3.248.0-r2

No linked articles in our index yet.