GO-2026-4918 vulnerabilities

Vulnerabilities for packages: conftest, crossplane-provider-aws-elasticsearch, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-acm, splunk-otel-collector, aws-s3-controller, crossplane-provider-aws-guardduty, karma-fips, clickhouse-operator-fips, tekton-chains, policy-bot,...

CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...