VDB
GO-2024-3252
GO-2024-3252
PUBLISHED
gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | sigstore/gitsign | 0, 0 |
Timeline
- Nov 6, 2024 CVE Published
- Mar 3, 2026 CVE Updated
- May 1, 2026 Security Advisory