Go/github.com/sigstore/sigstore-go

sigstore-go has a multi-log threshold bypass via single compromised log

Modified: 9/10/2026

sigstore-go has an unbounded loop over untrusted input can lead to endless data attack

Modified: 9/10/2026

sigstore-go fails to check signature timestamps against a signing key's validity period

Modified: 9/10/2026

sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

Modified: 2/4/2026

sigstore-go has a multi-log threshold bypass via single compromised log in github.com/sigstore/sigstore-go

Modified: 7/23/2026

sigstore-go fails to check signature timestamps against a signing key's validity period in github.com/sigstore/sigstore-go

Modified: 8/18/2026