lsPass

lsPass: gestor de contraseñas local y cifrado GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass guarda inicios de sesión, notas seguras y claves de API en un almacén cifrado local. Sin red, sin nube, sin telemetría. Nunca se escribe nada secreto en disco en texto plano. Compilar y probar...

CVE-2026-73334

Apache Parquet (Java, org.apache.parquet.crypto.keytools package, versions 1.12–1.18 ) is vulnerable to unauthorized disclosure of KMS tokens when reading encrypted Parquet files. If the KMS URL is file-controlled rather than application-controlled, it is forwarded to a pluggable KmsClient implem...

CVE-2026-73334 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...

CVE-2026-81680

opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...

CVE-2026-81680

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files. An attacker with write access to the file header can delete recovery-slot fields and bypass authentication without re-encrypting the payload, silently removing recovery paths the ...

CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal

opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...