73703 matches found
CVE-2026-48259
creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f 2026-07-15 10:18:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27 2026-07-18 03:37:06+00:00| seen|...
CVE-2026-48816
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...
CVE-2026-55944
creationtimestamp| type| source ---|---|--- 2026-07-14 21:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4ha43uo2z 2026-07-14 22:02:11+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:43+00:00| seen|...
GHSA-7RX3-5WX3-5V76
creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:32+00:00| seen| https://gist.github.com/alon710/e9ace864fd0fc758277cc4aa4cece6b7 2026-07-14 20:43:17+00:00| seen| https://gist.github.com/alon710/69a35e6d85f7f0c43de5276d0ac08d9d...
CVE-2026-48816 sigstore-js: Insufficient Verification of Data Authenticity
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...
CVE-2026-48816
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...
CVE-2026-48816
CVE-2026-48816 affects sigstore-js, where prior to version 3.1.1 the verification logic in @sigstore/verify derives a transparency-log timestamp from tlogEntries[].integratedTime for bundle v0.2 inclusionProof-only entries, even though the inclusion proof path does not cryptographically bind inte...
CVE-2026-48816 sigstore-js: Insufficient Verification of Data Authenticity
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...
CVE-2026-48816 sigstore-js: Insufficient Verification of Data Authenticity
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...
GHSA-Q3V2-XJ35-9GRX
creationtimestamp| type| source ---|---|--- 2026-07-14 20:12:07+00:00| seen| https://gist.github.com/alon710/57f8fdc68fb17b420e33683532c115ad...
CVE-2026-5040
creationtimestamp| type| source ---|---|--- 2026-07-14 20:05:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyxth4og27...
CVE-2026-15701
creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyuqumh72z...
CVE-2026-58101
creationtimestamp| type| source ---|---|--- 2026-07-14 20:01:57+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqmyqxupdh22...
CVE-2026-47767
creationtimestamp| type| source ---|---|--- 2026-07-14 20:00:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyorqyxp2q 2026-07-16 15:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrkwx3e5w2d 2026-07-17 22:37:06+00:00| seen|...
GHSA-VVP9-H8P2-XWFC
creationtimestamp| type| source ---|---|--- 2026-07-14 19:42:05+00:00| seen| https://gist.github.com/alon710/553eb2089447345d30a93b1881dc2ee5...
GHSA-G7MM-9VX7-JM7H
creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...
CVE-2026-50141
creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...
CVE-2026-50405
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:12+00:00| seen|...
GHSA-P433-FP4G-PC2C
creationtimestamp| type| source ---|---|--- 2026-07-14 18:51:32+00:00| seen| https://gist.github.com/yuriw/cc567f8b243229aaf1def97d7207ea0d 2026-07-14 18:52:20+00:00| seen| https://gist.github.com/yuriw/be55c19caff2bacad733b7df0c67de08...