CVE-2026-54787

Microsoft · Published August 7, 2026

3.1

CVSS v3.1

INFO

Patch availableGet patch

Description

sigstore-go fails to check signature timestamps against a signing key's validity period. sigstore-go fails to check signature timestamps against a signing key's validity period

Affected Products

azl3 gh 2.62.0-20 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N