PT-2024-36570 · Unknown · Sigstore-Python

Name of the Vulnerable Software and Affected Versions: sigstore-python versions 2.0.0 through 3.6.0 Description: The issue concerns insufficient validation of the "integration time" in "v2" and "v3" bundles during the verification flow. This affects versions of sigstore-python newer than 2.0.0 bu...