471 matches found
NPM: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
NPM: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS vulnerability discovered by ? in WordPress Npm mariadb versions = 3.3.0, 3.5.4...
MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
Description On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket Authentication.validateFingerPrint. That validation calls hash on the...
CVE-2026-107382 MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash...
CVE-2026-107382
The MariaDB Connector/Node.js (versions 3.3.0 to 3.5.4 ) is vulnerable to a denial of service due to an uncaught exception during ed25519 authentication with zero-configuration TLS. The root cause is that the Ed25519PasswordAuth.hash() function references a seed identifier that is out of scope wi...
IAGA-Sentinel
IAGA Sentinel 面向 AI 智能体的欧盟《人工智能法案》合规证据层。 对智能体经由其路由的每项操作提供加密签名、可重放验证的证据，其结构旨在支持《人工智能法案》第 12 条记录保存及附件 IV 文档要求。 文档 · 一条提示完成设置 · 快速入门 · 自主智能体设置 · 社区版与企业版 · 关于我们 · 许可证 由欧盟的三位创始人（法国、德国、意大利）打造，并经过研究验证而非营销验证：已在摩洛哥马拉喀什 AISEC 2026 会议上通过同行评审。 一条提示完成设置 将此内容粘贴给你的编码智能体。它会读取 AGENTS.md 并完成其余工作——...
Tyr
Tyr Correo electrónico peer-to-peer en la red Yggdrasil. Inglés | Русский Capturas de pantalla | | | ---|---|---|--- | | | ¿Qué es Tyr? Tyr ej...
mcp-server-attestation
Parte delStudioMeyer MCP Stack — Hecho en Mallorca 🌴 · ⭐ si lo usas mcp-server-attestation Endurecimiento de la cadena de suministro de capa 2 para servidores del Model Context Protocol. Manifiestos de herramientas firmados con Ed25519, atestación de spawn en tiempo de ejecución, saneador de...
scopeblind-gateway
⚠️ 此仓库已迁移。 后续开发请移至 ScopeBlind/scopeblind-gateway 。 此个人分支可能落后于官方仓库。请使用组织仓库提交问题、拉取请求并获取最新代码。 protect-mcp MCP 服务器安全网关。默认以影子模式记录日志，支持按工具策略、可选的本地 Ed25519 签名收据，以及便于验证的审计输出。 当前 CLI 路径： 将任何 stdio MCP 服务器包装为透明代理。在影子模式下，它会记录所有 tools/call 请求并放行所有内容。添加策略文件以实施按工具规则。运行 protect-mcp init 生成本地签名密钥和配置，以便网关也能输出签名收据。...
Galdralag-firmware
Galdr — Galdralag 固件 开放发明网络 本项目已注册于开放发明网络（OIN）。OIN 是一个防御性专利池：成员之间交叉许可与 Linux 相关的专利，使参与者能够在降低专利风险的情况下发布和使用开源软件。 状态：等待中： https://github.com/betrusted-io/xous-core/pull/937 目录 开放发明网络 安全通告：Shamir 主机拆分 这是什么 Galdra 联系人元数据 本固件是什么（以及不是什么） 签名固件（Ed25519，boot0） 这是 AI 垃圾吗？ 测试结果 为什么用 Rust？ 内存安全 系统级健壮性（有局限）...
scopeblind-gateway
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...
CLEANSTART-2026-XF84343 For certain crafted inputs, a 'ed25519
CVE-2026-46598 affects multiple packages. For certain crafted inputs, a 'ed25519. See references for individual vulnerability details...
CLEANSTART-2026-IZ71497 For certain crafted inputs, a 'ed25519
CVE-2026-46598 affects multiple packages. For certain crafted inputs, a 'ed25519. See references for individual vulnerability details...
GHSA-X33G-CR3X-6449 PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key x does not correspond to the supplied private key d. When d is present, OKPAlgorithm.fromjwk constructs the Ed25519/Ed448 private key from d without verifying that the public key derived from d matches x...
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key x does not correspond to the supplied private key d. When d is present, OKPAlgorithm.fromjwk constructs the Ed25519/Ed448 private key from d without verifying that the public key derived from d matches x...
CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection
5. CVE-2026-1122 – Bypass de firma de actualización de firmware IoT mediante inyección de punto de orden bajo Resumen La verificación de firmware OTA de un dispositivo IoT utiliza una implementación Ed25519 defectuosa que no rechaza claves públicas con componentes de orden pequeño, lo que permite...
ed25519-unsafe-libs
ed25519-unsafe-libs Ataque de oráculo a la función de firma con doble clave pública sobre Ed25519 Una lista de librerías de firmas ed25519 potencialmente inseguras que permiten una api pública donde la clave secreta y la clave pública pueden proporcionarse de forma independiente como entradas de ...
CLEANSTART-2026-BX44757 For certain crafted inputs, a 'ed25519
Security vulnerability affects the consul package. For certain crafted inputs, a 'ed25519...
CLEANSTART-2026-LJ85716 For certain crafted inputs, a 'ed25519
Security vulnerability affects the kube-state-metrics-fips package. For certain crafted inputs, a 'ed25519...