IAGA-Sentinel

IAGA Sentinel La couche de preuve de conformité à l'AI Act européen pour les agents IA. Des preuves signées cryptographiquement et vérifiables par rejeu de chaque action qu'un agent achemine à travers elle, structurées pour prendre en charge la tenue de registres de l'article 12 de l'AI Act et la...

Tyr

Tyr Одноранговая P2P электронная почта в сети Yggdrasil. English | Русский Скриншоты | | | ---|---|---|--- | | | Что такое Tyr? Tyr запускает полно...

scopeblind-gateway

protect-mcp Portail de politique Cedar à échec fermé fail-closed plus reçus signés pour les appels d'outils d'agents IA. protect-mcp est un portail qui se place devant les appels d'outils d'un agent IA. Il évalue chaque appel par rapport à une politique Cedar le même langage qu'AWS utilise pour...

scopeblind-gateway

⚠️ 이 저장소는 이전되었습니다. 활성 개발은 ScopeBlind/scopeblind-gateway 에서 계속됩니다. 이 개인 포크는 공식 저장소보다 뒤쳐질 수 있습니다. 이슈, 풀 리퀘스트 및 최신 코드는 조직 저장소를 사용해 주세요. protect-mcp MCP 서버를 위한 보안 게이트웨이. 기본적으로 섀도우 모드 로그, 도구별 정책, 선택적 로컬 Ed25519 영수증, 검증 친화적인 감사 출력. 현재 CLI 경로: 모든 stdio MCP 서버를 투명 프록시로 래핑합니다. 섀도우 모드에서는 모든 tools/call 요청을...

mcp-server-attestation

ЧастьStudioMeyer MCP Stack — Создано на Мальорке 🌴 · ⭐ если используете mcp-server-attestation Укрепление безопасности цепочки поставок уровня 2 для серверов Model Context Protocol. Манифесты инструментов с подписью Ed25519, аттестация spawn-вызовов в рантайме, санитайзер аргументов с политикой...

Galdralag-firmware

Galdr — micrologiciel Galdralag Open Invention Network Ce projet est enregistré auprès de l'Open Invention Network OIN. L'OIN est un pool de brevets défensif : les membres se concèdent mutuellement des licences croisées sur les brevets liés à Linux afin que les participants puissent distribuer et...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – Обход подписи обновления прошивки IoT через инъекцию точки малого порядка Обзор OTA-проверка прошивки IoT-устройства использует некорректную реализацию Ed25519, которая не отклоняет открытые ключи с компонентами малого порядка, что позволяет злоумышленнику подделать...

ed25519-unsafe-libs

ed25519-unsafe-libs Атака Oracle на функцию подписи с двойным открытым ключом в Ed25519 Список потенциально небезопасных библиотек подписи ed25519, которые предоставляют публичный API, позволяющий передавать секретный и открытый ключи независимо друг от друга в качестве входных данных функции...

EulerOS Virtualization 2.10.0 : libsolv (EulerOS-SA-2026-3871)

According to the versions of the libsolv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...

EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3784)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

EulerOS 2.0 SP10 : libsolv (EulerOS-SA-2026-3700)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3809)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

Astra Linux – Vulnerability in libsodium

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data, mishandles checks for whether an elliptic curve point is valid. This occurs because it sometimes allows points that are not part of the main cryptographic group...

Astra Linux – Vulnerability in bind9

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial o...

securesystemslib v1.5.1

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

EUVD-2026-71717

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...

CVE-2026-53604

nebula-mesh (a self-hosted control plane for Slack Nebula mesh VPN by forgekeep ) is affected by a key-zeroization flaw in its web UI mobile-bundle path. The renderMobileBundle handler passes a decrypted *pki.CAManager containing the CA's ed25519 private key into mobilebundle.Build, which never c...

golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial o...