CVE-2025-29780 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the...

PT-2025-11300

Name of the Vulnerable Software and Affected Versions: Post-Quantum Secure Feldman's Verifiable Secret Sharing versions 0.7.6b0 and prior Description: The issue concerns timing side-channel vulnerabilities in the feldman vss library, specifically within the find secure pivot function and...

Post-Quantum Secure Feldman Verifiable Secret Sharing Security Vulnerabilities

Post-Quantum Secure Feldman Verifiable Secret Sharing is a Verifiable Secret Sharing VSS for Post-Quantum Secure Feldman in Python by the individual developer David Osipov. A security vulnerability exists in Post-Quantum Secure Feldman Verifiable Secret Sharing 0.7.6b0 and earlier versions, which...

CVE-2025-27155

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator pineconesim included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped whe...

net.praqma:matrix-reloaded (>=1.0.2, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.418) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.418)

org.jenkins-ci.main:jenkins-core MAVEN version 1.418 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:matrix-reloaded =1.0.2, =1.4, =1.5 - org.jenkins-ci.plugins:plugin 1.418 Source cves...

hudson.plugins.libvirt:libvirt-slave (1.7), net.praqma:matrix-reloaded (>=1.1.1, <=1.1.3) +60 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.420)

org.jenkins-ci.main:jenkins-core MAVEN version 1.420 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.libvirt:libvirt-slave 1.7 - net.praqma:matrix-reloaded =1.1.1, =1.8, =1.2, =1.7,...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.559)

org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

Linux Distros Unpatched Vulnerability : CVE-2024-50336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via...

Linux Distros Unpatched Vulnerability : CVE-2021-34813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the...