sigstore-java Timestamp Validation Bypass Fix Details

github.com 2026-08-13查看中文 →

Security AdvisoryHighsigstore

Affected:

sigstore-java

Referenced CVEs: CVE-2026-48791 · 2.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fix for MCP OAuth Token Leak: Isolation of Admin Row Data and Invariant Enforcement 2026-08-18 Dokploy Session Not Revoked on Password Change (CVE-2025-45791) 2026-08-18 Onyx CVE-2026-71424 Cross-user OAuth Token Leak in MCP API 2026-08-18 MCP OAuth Token Storage Defect Fix (Security Intel) 2026-08-18 Onyx MCP OAuth Token Leakage Fix: API Server Auth Template Protection 2026-08-18

Offline Archive

Offline screenshot & PDF are Pro-exclusive