Linuxfoundation Sigstore-python — known CVE vulnerabilities

Every CVE whose affected-product data names Linuxfoundation Sigstore-python, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-24408 — CVSS 0.0 (none): sigstore-python is a Python tool for generating and verifying Sigstore signatures. Prior to version 4.2.0, the sigstore-python OAuth…