rekor-log-verifier (0.1.0) potentially affected by CVE-2026-24408 via sigstore (3.6.5)

sigstore PYPI version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - rekor-log-verifier 0.1.0 Source cves: CVE-2026-24408 Source advisory: OSV:PYSEC-2026-1924...

rekor-log-verifier (0.1.0) potentially affected by CVE-2026-24408 via sigstore (3.6.5)

sigstore PYPI version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - rekor-log-verifier 0.1.0 Source cves: CVE-2026-24408 Source advisory: OSV:GHSA-HM8F-75XX-W2VR...