sigstore cosign Vulnerabilities

sigstore cosign has 9 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting sigstore cosign, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.