Sigstore has released a security update to address a vulnerability in Sigstore Cosign. An improper verification of cryptographic signature vulnerability exists within Sigstore Cosign 1.0.0.

For a complete description of the vulnerabilities and affected systems go to CVE-2022-35929 Detail.

IT Security

Read more about IT Security service offerings.