Moderate severity6.5NVD Advisory· Published Jul 1, 2026

sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation

CVE-2026-48816

Description

Sigstore/Sigstorellm-fuzzy
osv-coords2 versions
pkg:apk/chainguard/pulumi-language-nodejs pkg:apk/wolfi/pulumi-language-nodejs
< 3.248.0-r2+ 1 more
- (no CPE)range: < 3.248.0-r2
- (no CPE)range: < 3.248.0-r2

No linked articles in our index yet.