369 matches found
hpke-rs (>=0.1.0-pre.1, <=0.1.0-pre.2), openmls (>=0.4.0-pre.1, <=0.4.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs-rust-crypto (0.1.1)
hpke-rs-rust-crypto CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on hpke-rs-rust-crypto and may be impacted: - hpke-rs =0.1.0-pre.1, =0.4.0-pre.1, =0.1.0-pre.1, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory:...
libcrux-kem (>=0.0.2-alpha.1, <=0.0.2), libcrux-psq (0.0.2-beta.3) potentially affected by CVE-2026-76234 via libcrux-ecdh (0.0.2-beta.3)
libcrux-ecdh CARGO version 0.0.2-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ecdh and may be impacted: - libcrux-kem =0.0.2-alpha.1, =0.0.2 - libcrux-psq 0.0.2-beta.3 Source cves: CVE-2026-76234 Source advisory: OSV:RUSTSEC-2026-0023...
CVE-2026-23967
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a...
CVE-2026-23965 sm-crypto Affected by Signature Forgery in SM2-DSA
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurations, an attacker can forge valid signatures for...
CVE-2026-23965
CVE-2026-23965 affects the JavaScript library sm-crypto, which implements SM2/SM3/SM4. The issue lies in the SM2 signature verification logic in versions prior to 0.4.0. Under default configurations, an attacker can forge valid signatures for arbitrary public keys, enabling signature forgery. If ...
@3w5h/knowledge_query (1.0.30), @3w5h/utils (>=1.0.0, <=1.0.7) +614 more potentially affected by CVE-2026-23965 via sm-crypto (>=0.0.9, <=0.3.14)
sm-crypto NPM version =0.0.9, =1.0.0, =0.1.0, =4.4.42, =0.0.2, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.1.15, =2.3.9 and more Source cves: CVE-2026-23965 Source advisory: SNYK:JS-SMCRYPTO-15054484...
@ancademy/bespoke-classic-client (>=2.2.6, <=2.7.8-alpha.1), @ancademy/bespoke-classic-robot (>=2.2.6, <=2.7.8-alpha.2) +111 more potentially affected by CVE-2026-23966 via sm-crypto (>=0.0.9, <=0.3.13)
sm-crypto NPM version =0.0.9, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.1.15, =2.7.0, =2.1.15, =2.1.4, =2.7.7, =2.7.0, =2.7.8-alpha.1 and more Source cves: CVE-2026-23966 Source advisory: OSV:GHSA-PGX9-497M-6C4V...
CVE-2022-31021
Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a generated private key is sufficient to...
[SECURITY] Fedora 41 Update: mbedtls-2.28.10-2.fc41
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
CVE-2025-58189
CVE-2025-58189 : IBM bulletin details this vulnerability: when Conn.Handshake fails during ALPN negotiation, the error may include attacker-controlled data (the client-sent ALPN protocols) and is not escaped. This can reveal sensitive info in logs. CVSS v3.1 base score 5.3 (Network, Low/None impa...
CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
[SECURITY] Fedora 43 Update: mbedtls-3.6.5-1.fc43
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
[SECURITY] Fedora 42 Update: mbedtls-3.6.5-1.fc42
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
EUVD-2017-11944
Malware in sbrugna...
EUVD-2021-23514
Malware in sbrugna...
EUVD-2025-21027
Malicious code in bioql PyPI...
EUVD-2025-30262
Malicious code in bioql PyPI...
EUVD-2024-0268
Malicious code in bioql PyPI...