CVE-2026-74875

creationtimestamp| type| source ---|---|--- 2026-08-17 12:07:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo4gowcm2m 2026-08-17 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtccw2xbwf25 2026-08-18 04:20:05+00:00| seen|...

CVE-2026-74875

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

CVE-2026-74875

openssl_encrypt (Python package) before 1.4.0 silently skips JSON schema validation when the optional jsonschema library is absent, allowing attackers to remove that package or supply unknown metadata format versions to bypass all schema checks and process malicious data (CVSS 9.8 CRITICAL). No i...