4 CVEs
sigstore sigstore-js Vulnerabilities
CVE security advisories and vulnerability history for sigstore-js by sigstore.
4
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
3
Public exploits
PoC or exploit code
7.3
Avg CVSS
2026–2026
Last updated
Overview
sigstore sigstore-js has 4 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting sigstore sigstore-js, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.