Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118763— @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location

Quick assessment

Affected
sigstore sigstore-js
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

sigstore-js 提供用于与 Sigstore 服务交互的 JavaScript 库。在 0.7.2 版本之前， 中的 方法会将注册表的 Authorization 和 Docker 配置头作为默认值存储在一个共享的 HTTP 客户端上；而 方法则向由注册表提供的、指向绝对 blob 上传位置的 Location 发起全新的 PUT 请求，却未验证该位置的源（origin）或协议（scheme）是否与注册表一致。因此，恶意或已被攻陷的注册表可以将用户通过 推送工件时的请求重定向到攻击者控制的服务器，从而窃取注

CVSS 7.4 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
sigstore sigstore-js < 0.7.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118763

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location
Source: CVE Program / CVE List V5
Vulnerability Description
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn() method that stores registry Authorization and Docker configuration headers as defaults on a shared HTTP client, while RegistryClient.uploadBlob() sends a fresh PUT to an absolute blob-upload Location supplied by the registry without checking that its origin or scheme matches the registry. A malicious or compromised registry can therefore direct a user pushing an artifact through attachArtifactToImage() to an attacker-controlled host and receive the registry bearer token, Basic credentials, or custom authentication headers. Redirect-time header stripping does not prevent the leak because the cross-host PUT is a new explicit request rather than a followed redirect. This is a residual of CVE-2026-59891, whose fix changed credential selection in credentials.ts but did not constrain where credentials are sent from registry.ts. Version 0.7.2 fixes the issue by separating registry credentials from client-wide defaults and sending them only to the registry origin.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
sigstore sigstore-js < 0.7.2 -

II. Public POCs for CVE-2026-118763

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118763

请登录查看更多情报信息。

Other References for CVE-2026-118763 (5)

IV. Related Vulnerabilities

Same product: sigstore-js
Same vendor: sigstore
Same weakness: CWE-522