{"uuid": "5c0fbb16-440f-4455-9a59-aa8e4e100c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5yafsgae3owcl", "content": "CVE-2026-54787 - sigstore-go fails to check signature timestamps against a signing key's validity period\nCVE ID : CVE-2026-54787\n \n Published : July 31, 2026, 11:17 p.m. | 31\u00a0minutes ago\n \n Description : sigstore-go is a Go library for Sigstore signing and verification. Prior ...", "creation_timestamp": "2026-08-01T00:00:23.977586Z"}