CLEANSTART-2026-SK52724

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK52724.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2026-SK52724
Upstream
  • ghsa-259r-337f-4rfw
  • ghsa-47q9-m4ww-924m
  • ghsa-9c54-x2g4-v92j
  • ghsa-9vcr-p3rj-q5q6
  • ghsa-hrxh-6v49-42gf
Withdrawn
2026-09-18T11:59:01Z
Published
2026-08-13T12:10:09Z
Modified
2026-09-18T12:18:24Z
Summary
Security fixes in cosign 3.1.2-r1
Details

Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...

References

Affected packages

CleanStart / cosign

Package

Name
cosign

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.1.2-r1

Affected versions

3.*
3.1.2-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK52724.json"