Publish Advisories

GHSA-38vq-g6vr-w8wf
GHSA-fcv2-xgw5-pqxf

Author: advisory-database[bot]

…-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.json …-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.jsonadvisories/unreviewed/2026/01/GHSA-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.json renamed to advisories/github-reviewed/2026/01/GHSA-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.json advisories/unreviewed/2026/01/GHSA-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.json renamed to advisories/github-reviewed/2026/01/GHSA-38vq-g6vr-w8wf/GHSA-38vq-g6vr-w8wf.json

@@ -1,24 +1,53 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-38vq-g6vr-w8wf",
-  "modified": "2026-01-22T18:30:39Z",
+  "modified": "2026-01-22T20:28:39Z",
   "published": "2026-01-22T18:30:39Z",
   "aliases": [
     "CVE-2026-1260"
   ],
+  "summary": "Sentencepiece has a a heap overflow issue",
   "details": "Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.",
   "severity": [
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "sentencepiece"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.2.1"
+            }
+          ]
+        }
+      ]
     }
   ],
-  "affected": [],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1260"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/google/sentencepiece/commit/d856b67fdb3492e035489abf9b3aaf486144b2c0"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/google/sentencepiece"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/google/sentencepiece/releases/tag/v0.2.1"
@@ -29,8 +58,8 @@
       "CWE-119"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-01-22T20:28:39Z",
     "nvd_published_at": "2026-01-22T17:16:30Z"
   }
 }

advisories/github-reviewed/2026/01/GHSA-fcv2-xgw5-pqxf/GHSA-fcv2-xgw5-pqxf.json

@@ -0,0 +1,66 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fcv2-xgw5-pqxf",
+  "modified": "2026-01-22T20:28:56Z",
+  "published": "2026-01-22T20:28:56Z",
+  "aliases": [],
+  "summary": "sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal",
+  "details": "## Summary\n\nThe legacy TUF client `pkg/tuf/client.go`, which supports caching target files to disk, constructs a filesystem path by joining a cache base directory with a target name sourced from signed target metadata, but it does not validate that the resulting path stays within the cache base directory.\n\nNote that this should only affect clients that are directly using the TUF client in sigstore/sigstore or are using an older version of Cosign. As this TUF client implementation is deprecated, users should migrate to https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf as soon as possible.\n\nNote that this does not affect users of the public Sigstore deployment, where TUF metadata is validated by a quorum of trusted collaborators. \n\n## Impact\n\nA malicious TUF repository can trigger arbitrary file overwriting, limited to the permissions that the calling process has.\n\n## Workarounds\n\nUsers can disable disk caching for the legacy client by setting `SIGSTORE_NO_CACHE=true` in the environment, migrate to https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf, or upgrade to the latest sigstore/sigstore release.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/sigstore/sigstore"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.10.4"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 1.10.3"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/sigstore/sigstore/security/advisories/GHSA-fcv2-xgw5-pqxf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sigstore/sigstore/commit/8ec410a2993ea78083aecf0e473a85453039496e"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/sigstore/sigstore"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sigstore/sigstore/releases/tag/v1.10.4"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-01-22T20:28:56Z",
+    "nvd_published_at": null
+  }
+}