Published
Last updated
zarf
7.5
CVSS V3
Status
Impact
The sigstore modules have tight interdependencies, meaning bumping the affected module's version results in in build failures. Upstream will need to release a version which integrates the fixed module version.