writeups.xyz / How Sigstore quickly patched an upstream vulnerability

Submitter : c2a

Date: 10 November 2022

Bounty : undisclosed

Vulnerabilities :

• OAuth
• Account Takeover
• Phishing

Programs :

• Sigstore
• Dex

Authors :

• Joern Schneeweisz

Link :
https://blog.sigstore.dev/how-sigstore-quickly-patched-an-upstream-vulnerability-76ba84ef1122