Sigstore Timestamp Authority vulnerable to denial-of-service attack

The Sigstore Timestamp Authority, a critical digital signature infrastructure, contains a flaw in its API ParseJSONRequest that allows service overload.

Published 10sem1 sourceNotable

Lire en français

≈ 22sSpeed

The fact

This vulnerability exposes the code signing system widely used by open source developers.

An attack could make unavailable the time-stamping service critical for verifying the authenticity of software packages.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

Sigstore #Sigstore #Timestamp Authority #API #surcharge

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on May 9, 2026

← Back to home

The fact

Read more

Sigstore Timestamp Authority: unauthorized write access via VerifyTimestampResponse

Critical tag signature verification flaw discovered in cryptographic libraries

Why I Sign Every .exe With Sigstore - PC Workman v1.7.2 Release

Weak signature flaw detected in RAU file format

Six critical vulnerabilities detected in system and infrastructure software

Critical vulnerability in Flask-HTTPAuth allows authentication bypass