This content is viewable by Everyone
Vulnerability in Sigstore Cosign
Sigstore has released a security update to address a vulnerability in Sigstore Cosign. An improper verification of cryptographic signature vulnerability exists within Sigstore Cosign 1.0.0.
For a complete description of the vulnerabilities and affected systems go to CVE-2022-35929 Detail.