{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/sigstore-js--0.7.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sigstore:sigstore-js:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-118763"},{"cvss":9.6,"id":"CVE-2026-59891"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["sigstore-js (\u003c 0.7.2)"],"_cs_severities":["high"],"_cs_tags":["credential-theft","oci","supply-chain-security"],"_cs_type":"advisory","_cs_vendors":["Sigstore"],"content_html":"\u003cp\u003eThe sigstore-js library, specifically the \u003ccode\u003eRegistryClient.uploadBlob()\u003c/code\u003e method, contains a vulnerability where it fails to constrain the destination of requests to an OCI registry's specified upload location. An attacker who controls or compromises an OCI registry can return a malicious blob-upload URL. When the library attempts to upload an artifact, it sends a PUT request to the attacker's host, including credentials (bearer tokens, Basic auth, or custom headers) originally intended for the legitimate registry. This vulnerability is a residual issue from CVE-2026-59891, where previous fixes were insufficient to scope credentials to the registry origin. Version 0.7.2 addresses this by isolating credentials and enforcing origin matching.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the theft of sensitive authentication credentials, including bearer tokens and Basic credentials used for registry access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade sigstore-js to version 0.7.2 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview registry interaction logs for instances where \u003ccode\u003eattachArtifactToImage()\u003c/code\u003e requests result in redirects or cross-origin POST/PUT operations to non-registry domains.\u003c/li\u003e\n\u003cli\u003eIf using sigstore-js within CI/CD pipelines, ensure the registry host configuration follows the principle of least privilege and verify that CI secrets are scoped to specific registry endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T17:53:20Z","date_published":"2026-10-29T17:53:20Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sigstore-js-credential-leak/","summary":"The sigstore-js library prior to 0.7.2 fails to validate OCI registry redirect origins in RegistryClient.uploadBlob(), allowing compromised registries to perform unauthorized exfiltration of authentication headers to attacker-controlled hosts.","title":"Sigstore-js: Registry credential disclosure (CVE-2026-118763)","url":"https://feed.craftedsignal.io/briefs/2026-10-sigstore-js-credential-leak/"}],"language":"en","title":"CraftedSignal Threat Feed - Sigstore-Js (\u003c 0.7.2)","version":"https://jsonfeed.org/version/1.1"}