CVE-2026-49835Published
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and …
Exact source revision recorded 25 Oct 2026 12:17:38 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-49835
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.