HIGH7.5npm
GHSA-52v5-jr5w-gjxr· CVE-2026-48815sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced
Modified: 9/10/2026
package
npm/sigstore
pkg:npm/sigstore
package
pkg:npm/sigstore
sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced
Modified: 9/10/2026