138 matches found
CLEANSTART-2026-DY37532 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Security vulnerability affects the cortex-fips package. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)
Summary A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation which may result in a denial of service. Microsoft Azure Identity is used by IBM Robotic Process Automation for authentication processing. This bulletin identifies the security fixes to apply to...
CVE-2019-20138
The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's cryptopwhashstr is not used...
Use of Cache Containing Sensitive Information
Overview @workos-inc/authkit-nextjs is an Authentication and session helpers for using WorkOS & AuthKit with Next.js Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to missing anti-caching headers on authenticated responses. An attacker can ga...
MGASA-2025-0285 Updated perl-Authen-SASL packages fix security vulnerability
Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. CVE-2025-40918...
[SECURITY] [DLA 4352-1] python-authlib security update
Debian LTS Advisory DLA-4352-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2025 https://wiki.debian.org/LTS Package : python-authlib Version : 0.15.4-1+deb11u1 CVE ID : CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 Multiple...
Debian dla-4352 : python-authlib-doc - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4352 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4352-1 [email protected]...
SUSE-SU-2025:3754-1 Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2025-61920: limited the size of the header to prevent DoS bsc1251921...
EUVD-2019-10044
Malware in sbrugna...
EUVD-2008-2662
Malware in sbrugna...
EUVD-2025-20283
Malicious code in bioql PyPI...
EUVD-2025-4279
Malicious code in bioql PyPI...
EUVD-2022-7285
Malicious code in bioql PyPI...
EUVD-2024-2098
Malicious code in bioql PyPI...
EUVD-2023-1154
Malicious code in bioql PyPI...
EUVD-2024-3569
Malicious code in bioql PyPI...
OESA-2025-2069 restic security update
restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fixes: A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library Cloud Software the affected version unknown. It has been rated as problematic.Using CWE...
MAL-2025-15085 Malicious code in auth-jwt-csrf-kinetic (npm)
The package auth-jwt-csrf-kinetic was found to contain malicious code...
Catalyst::Authentication::Credential::HTTP 安全漏洞
Catalyst::Authentication::Credential::HTTP is a Catalyst open source HTTP basic and digest authentication library. A security vulnerability exists in Catalyst::Authentication::Credential::HTTP version 1.018 and earlier that stems from the use of a non-strongly encrypted source to generate a nonce...
CVE-2025-55008
The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...