SUSE CVE-2026-48815

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications...

CVE-2026-48815 vulnerabilities

Vulnerabilities for packages: pulumi...

CVE-2026-48815

creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:03+00:00| published-proof-of-concept| https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr 2026-07-15 12:00:58+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodrr2wi2t 2026-07-27...