—PyPI
PYSEC-2026-1923· CVE-2024-55655, GHSA-hhfg-fwrw-87w7sigstore has insufficient validation of integration timestamp during verification
Modified: 7/7/2026
package
PyPI/sigstore
pkg:pypi/sigstore
—0.0PyPI
PYSEC-2026-1924· CVE-2026-24408, GHSA-hm8f-75xx-w2vrsigstore CSRF possibility in OIDC authentication during signing
Modified: 7/7/2026
LOWPyPI
GHSA-hhfg-fwrw-87w7· CVE-2024-55655, PYSEC-2026-1923sigstore has insufficient validation of integration timestamp during verification
Modified: 9/10/2026
—0.0PyPI
GHSA-hm8f-75xx-w2vr· CVE-2026-24408, PYSEC-2026-1924sigstore CSRF possibility in OIDC authentication during signing
Modified: 7/7/2026