CVE-2026-118763 | sigstore sigstore-js up to 0.7.1 Registry Client registry.ts RegistryClient.signIn redirect

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in sigstore sigstore-js up to 0.7.1. Affected by this vulnerability is the function RegistryClient.signIn of the file packages/oci/src/registry.ts of the component Registry Client. Executing a manipulation can lead to open redirect.

This vulnerability is tracked as CVE-2026-118763. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More