CVE-2026-48758
1 advisory.
npm/@sigstore/core CVE-2026-48758: medium 5.4
@sigstore/core has DSSE payloadType type-binding failure
Action: Upgrade @sigstore/core to 3.2.1 or later.
npm i @sigstore/core@3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.1 | - |
Fixed versions
| 3.2.1 |
Sources
- osv: GHSA-jfc7-64v2-mr8c
- https://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c
- https://github.com/sigstore/sigstore-js
CVE-2026-48758 · published · modified · JSON