MEDIUM6.5npmGHSA-xgjw-pm74-86q4· CVE-2026-48816sigstore-js has Insufficient Verification of Data AuthenticityModified: 9/10/2026