HIGH7.5RubyGems
GHSA-mhg6-2q2v-9h2c· CVE-2026-31830sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest
Modified: 3/19/2026
package
RubyGems/sigstore
pkg:rubygems/sigstore
package
pkg:rubygems/sigstore
sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest
Modified: 3/19/2026