SUSE CVE-2025-70887

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signeddata.py and the context.py components...

dnv-f2at-helpers (>=0.1.4 <=0.1.5), dnv-oneworkflow (>=1.0.0.1421 <=1.1.2) +3 more potentially affected by CVE-2025-70887 via signify (>=0.4.0 <=0.7.1)

signify PYPI version =0.4.0, =0.1.4, =1.0.0.1421, =5.16.0.124, =1.1.0, =0.1.0, =1.2.1 Source cves: CVE-2025-70887 Source advisory: OSV:GHSA-P4HH-MQ57-GQ8X...

EUVD-2025-209004

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signeddata.py and the context.py components...

CVE-2025-70887

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signeddata.py and the context.py components...