Vulnerabilities
CVE-2026-24408 - sigstore has CSRF possibility in OIDC authentication during signing
CVE ID : CVE-2026-24408 Published : Jan. 26, 2026, 11:16 p.m. | 33 minutes ago Description : sigstore-python is a Python tool for generating and verifying Sigstore signatures. Prior to version 4.2.0, the sigstore-python OAuth authentication flow is susceptible to Cross-Site Request Forgery. `_OAuthSession` creates a unique