CVE-2026-118763

Name of the Vulnerable Software and Affected Versions sigstore-js versions prior to 0.7.2

Description The RegistryClient.signIn() method in packages/oci/src/registry.ts stores registry Authorization and Docker configuration headers as defaults on a shared HTTP client. Simultaneously, the RegistryClient.uploadBlob() function sends a PUT request to an absolute blob-upload Location provided by the registry without verifying if the origin or scheme matches the registry. Consequently, a compromised registry can redirect a user pushing an artifact via attachArtifactToImage() to an attacker-controlled host, leading to the leak of registry bearer tokens, Basic credentials, or custom authentication headers. This occurs because the cross-host PUT is treated as a new explicit request, bypassing redirect-time header stripping.

Recommendations Update to version 0.7.2.