GO-2026-4918 vulnerabilities

Vulnerabilities for packages: temporal-server, chart-testing-fips, crossplane-provider-aws-wafv2, azuredisk-csi, timoni, caddy-fips, fairwinds-gemini, nginx-prometheus-exporter-fips, falcosidekick, cloud-provider-gcp-cloud-controller-manager-fips, custom-pod-autoscaler, verticadb-operator-fips,...

CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...