openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

A flaw was found in the Certificate Management Protocol CMP implementation within OpenSSL. An attacker with existing Registration Authority RA level credentials could exploit an error in the certificate verification process during a Root Certificate Authority CA key update. This vulnerability...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy, frankenphp-8.2, frankenphp-8.5, frankenphp-8.3, step-ca-fips, frankenphp-8.4, step-issuer-fips...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: mariadb-operator, opentelemetry-operator, cert-manager-google-cas-issuer, percona-xtradb-cluster-operator, cert-manager-cmctl, cert-manager-openshift-routes-fips, cert-manager-istio-csr-fips, step-issuer, gitlab-operator, cert-manager-openshift-routes,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-exporter-fips, aws-privateca-issuer, cert-manager-cmctl, step-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl-fips, cert-exporter, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step, step-ca, caddy, step-issuer...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, step-ca, caddy, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gitness, sftpgo, step-issuer, cloudflared, caddy, step-ca, kyverno-policy-reporter-ui, step, rclone, buf, tkn, karma, gogatekeeper...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-exporter, step-issuer, cert-manager-cmctl, cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, percona-server-mongodb-operator, step-issuer, mariadb-operator, cert-manager-cmctl, opentelemetry-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: mongo-tools, mockgen, witness, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-nfs, cis-operator, nri-haproxy, rclone, wire-go, cloud-sql-proxy, undock, delve, amazon-cloudwatch-agent-operator, rabbitmq-messaging-topology-operator, k3s,...

CVE-2026-18353

A flaw was found in PIA. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF vulnerability by crafting a malicious OpenID Connect OIDC issuer URL. This bypasses an internal allowlist due to inconsistent URL parsing between Python's urlparse and the requests/urllib3 librarie...

Security Bulletin:Improper Chain of Trust in Erlang OTP's pubkey_cert Module Allows Certificate Forgery

Summary Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP publickey pubkeycert module allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery. In lib/publickey/src/pubkeycert.erl, pubkeycert:validateextensions/7...

python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...

python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...

python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...

CVE-2026-69092 Admidio before 5.0.11 Reflected XSS via SSO/SAML Endpoint

Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters to...

CVE-2026-69092

CVE-2026-69092 affects Admidio versions before 5.0.11. The issue is a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or Ligh...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

Improper Certificate Validation

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...