CVE-2025-70887

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signeddata.py and the context.py components...

CVE-2025-70887

CVE-2025-70887 affects Ralphje Signify before v0.9.2. The issue enables privilege escalation via the signed_data.py and context.py components. Multiple sources (Red Hat, OSV, CVE lists) confirm the impact and link to a fix: update to Signify v0.9.2 or later. Public exploitation details are not pr...