72947 matches found
DEBIAN-CVE-2026-54787
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...
GHSA-WQQC-JJCQ-VFXM
creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb...
CVE-2026-18394
creationtimestamp| type| source ---|---|--- 2026-07-31 22:14:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxy3dgsuf2v 2026-08-01 00:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18394...
CVE-2026-54787 sigstore-go fails to check signature timestamps against a signing key's validity period
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...
CVE-2026-54787 sigstore-go fails to check signature timestamps against a signing key's validity period
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...
CVE-2026-54787
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...
CVE-2026-54787
CVE-2026-54787 affects the Go library sigstore-go. Before 1.2.1, it does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a long‑lived signing key without a certificate, enabling an attacker with expired key material to sign accepted bundles. The issue i...
CVE-2026-62959
creationtimestamp| type| source ---|---|--- 2026-07-31 21:55:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/duejp3dwq35n3 2026-08-01 00:15:24+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62959...
CVE-2026-62999
creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l 2026-08-01 00:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999...
CVE-2026-17349
creationtimestamp| type| source ---|---|--- 2026-07-31 17:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgmxn3vz2s 2026-08-01 09:38:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz6clkjkg24 2026-08-01 09:38:47+00:00| seen|...
CVE-2026-17347
creationtimestamp| type| source ---|---|--- 2026-07-31 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgl4s7yf2a 2026-08-01 09:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz73zqg4s2m 2026-08-01 09:53:08+00:00| seen|...
CVE-2026-27060
creationtimestamp| type| source ---|---|--- 2026-07-31 15:44:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxcbkstiw2u 2026-07-31 17:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxiy5imiu2q...
CVE-2026-17561
creationtimestamp| type| source ---|---|--- 2026-07-31 13:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrx3hcpzko2e 2026-07-31 14:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4itkdeb2o 2026-08-01 03:00:29+00:00| seen|...
CVE-2026-62261
creationtimestamp| type| source ---|---|--- 2026-07-31 13:41:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y...
CVE-2026-14537
creationtimestamp| type| source ---|---|--- 2026-07-31 12:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwyd6ujnv2v...
CVE-2026-62391
creationtimestamp| type| source ---|---|--- 2026-07-31 11:36:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2...
CVE-2026-63222
creationtimestamp| type| source ---|---|--- 2026-07-31 11:00:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrwsfzyslz2z...
CVE-2026-15722
creationtimestamp| type| source ---|---|--- 2026-07-31 10:12:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c763a3in7urxc 2026-07-31 12:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrwvs7kinr2e...
CVE-2026-65313
creationtimestamp| type| source ---|---|--- 2026-07-31 10:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4qkw6nkrnga2r 2026-07-31 14:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4jayjxi2a 2026-07-31 14:35:13+00:00| seen|...