Vulnerabilities > Sigstore > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-11-10 CVE-2023-47122 Unspecified vulnerability in Sigstore Gitsign 0.6.0/0.7.0/0.7.1
Gitsign is software for keyless Git signing using Sigstore.
network
high complexity
sigstore
5.3
2023-11-07 CVE-2023-46737 Infinite Loop vulnerability in Sigstore Cosign
Cosign is a sigstore signing tool for OCI containers.
network
low complexity
sigstore CWE-835
5.3
2022-09-14 CVE-2022-36056 Unspecified vulnerability in Sigstore Cosign
Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure.
local
low complexity
sigstore
5.5