CO
Product
cosign
by sigstore · last CVE Apr 7, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 2
Watch

Add cosign to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24122
3.7
0%
Feb 19
Cosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked
Affected: < 3.0.5
CVE-2022-23649
3.3
0%
Feb 18
Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project
Affected: before 1.5.2
Showing 2