CLEANSTART-2026-VQ25749

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-VQ25749.json

JSON Data

https://api.test.osv.dev/v1/vulns/CLEANSTART-2026-VQ25749

Upstream

CVE-2026-25680

CVE-2026-25681

CVE-2026-27136

CVE-2026-33811

CVE-2026-33814

CVE-2026-39817

CVE-2026-39819

CVE-2026-39820

CVE-2026-39821

CVE-2026-39823

CVE-2026-39824

CVE-2026-39825

CVE-2026-39826

CVE-2026-39827

CVE-2026-39828

CVE-2026-39829

CVE-2026-39830

CVE-2026-39831

CVE-2026-39832

CVE-2026-39833

CVE-2026-39834

CVE-2026-39835

CVE-2026-39836

CVE-2026-42499

CVE-2026-42501

CVE-2026-42502

CVE-2026-42506

CVE-2026-42508

CVE-2026-46595

CVE-2026-46597

CVE-2026-46598

ghsa-pmwq-pjrm-6p5r

Published

2026-07-30T07:10:53Z

Modified

2026-09-04T13:32:23Z

Summary

Security fixes in cosign 3.0.6-r1

Details

Package cosign version 3.0.6-r1 fixes 32 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

References

https://github.com/sigstore/cosign

Affected packages

CleanStart / cosign

Package

Name: cosign

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.6-r1

Affected versions

3.*

3.0.6-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-VQ25749.json"