sigstore CSRF possibility in OIDC authentication during signing
Summary
The sigstore-python OAuth authentication flow is susceptible to Cross-Site Request Forgery.
Details
_OAuthSession creates a unique "state" and sends it as a parameter in the authentication request but the "state" in the server response seems not not be cross-checked with this value.
Fix should be fairly trivial.
Impact
This should be low impact: A man-in-the middle attacker could trick a sigstore-python user into signing something with an identity controlled by the attacker (by returning the response to an authentication request they created). This would be quite confusing but not dangerous.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | sigstore | < 4.2.0 | 4.2.0 |
References
- https://github.com/sigstore/sigstore-python/security/advisories/GHSA-hm8f-75xx-w2vr
- https://nvd.nist.gov/vuln/detail/CVE-2026-24408
- https://github.com/sigstore/sigstore-python/commit/5e77497fe8f0b202bdd118949074ec2f20da69aa
- https://github.com/sigstore/sigstore-python
- https://github.com/sigstore/sigstore-python/releases/tag/v4.2.0
- https://pypi.org/project/sigstore
- https://github.com/advisories/GHSA-hm8f-75xx-w2vr
- CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N- Weakness (CWE)
CWE-352- Platform
- Python (PyPI)
- Package
sigstore- Disclosed
- 26.01.2026
- Updated
- 11.10.2026 13:18
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2026-1924 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-hm8f-75xx-w2vr - CC BY 4.0
Vulnerability history: sigstore
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 2
- First → latest
- 12.2024 01.2026
- Without a fix
- 0
- Exploited in attacks
- 0
Severity breakdown
- Low 2
Disclosures per year
- 2024: 1
- 2025: 0
- 2026: 1
-
sigstore CSRF possibility in OIDC authentication during signing this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.