{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-48758", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-22T19:39:05.356Z", "datePublished": "2026-07-14T20:36:28.641Z", "dateUpdated": "2026-07-14T20:36:28.641Z"}, "containers": {"cna": {"title": "sigstore-js: DSSE payloadType type-binding failure", "problemTypes": [{"descriptions": [{"cweId": "CWE-347", "lang": "en", "description": "CWE-347: Improper Verification of Cryptographic Signature", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c"}, {"name": "https://github.com/sigstore/sigstore-js/pull/1657", "tags": ["x_refsource_MISC"], "url": "https://github.com/sigstore/sigstore-js/pull/1657"}, {"name": "https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7", "tags": ["x_refsource_MISC"], "url": "https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7"}, {"name": "https://github.com/sigstore/sigstore-js/releases/tag/%40sigstore%2Fcore%403.2.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/sigstore/sigstore-js/releases/tag/%40sigstore%2Fcore%403.2.1"}], "affected": [{"vendor": "sigstore", "product": "sigstore-js", "versions": [{"version": "< 3.2.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-14T20:36:28.641Z"}, "descriptions": [{"lang": "en", "value": "sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when converting the PAE string to bytes, allowing payloadType to be mutated after signing without invalidating the signature and breaking the type-binding guarantee that DSSE is designed to provide. This issue is fixed in version 3.2.1."}], "source": {"advisory": "GHSA-jfc7-64v2-mr8c", "discovery": "UNKNOWN"}}}}

{}

{}

{"bugzilla": {"description": "sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding", "id": "2499686", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499686"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.4", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "status": "draft"}, "cwe": "CWE-347", "details": ["A flaw was found in the @sigstore/core component. The preAuthEncoding function incorrectly uses Node.js 'ascii' encoding when converting Pre-Authentication Encoding (PAE) strings to bytes. This encoding truncates Unicode characters to their low byte, allowing an attacker to substitute characters in the payloadType with Unicode variants that produce identical PAE bytes. As a result, the payloadType can be mutated after a digital signature has been applied without invalidating the signature, thereby bypassing the intended type-binding guarantee of the Digital Signature Standard for Entity Authentication (DSSE)."], "mitigation": {"lang": "en:us", "value": "Upgrade to @sigstore/core 3.2.1 or later."}, "name": "CVE-2026-48758", "public_date": "2026-06-26T19:11:19Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-48758\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-48758\nhttps://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c"], "statement": "A flaw was found in @sigstore/core. The preAuthEncoding function uses Node.js ASCII encoding which truncates Unicode characters to their low byte, allowing payloadType to be mutated after signing without invalidating the DSSE signature.", "threat_severity": "Moderate"}

{}