sigstore fulcio

• CVE-2026-49478 High 8.7 Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage 0.3%
• CVE-2026-22772 Medium 5.8 Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass 0.2%
• CVE-2025-66506 High 7.5 Fulcio allocates excessive memory during token parsing 0.2%