python-tuf

Un framework pour sécuriser les systèmes de mise à jour logicielle The Update Framework TUF est un framework pour la livraison sécurisée de contenu et les mises à jour. Il protège contre divers types d'attaques sur la chaîne d'approvisionnement et offre une résilience face aux compromissions. Ce...

private-landing

Atterrissage Privé Apprenez l'authentification en la construisant correctement. Démo en direct · Modèle de menace · Flux d’authentification · ADR Note de démo : L’endpoint de connexion est protégé par des défis PoW adaptatifs — les échecs répétés augmentent la difficulté de la preuve de travail. ...

spire

!Production...

defending-code-reference-harness

Эталонный стенд для защиты кода Эталонная реализация для автономного обнаружения и устранения уязвимостей с помощью Claude, основанная на нашем опыте партнёрства с командами безопасности в нескольких организациях с момента запуска Claude Mythos Preview. Подробный разбор этих выводов и лучших...

hmac-bcrypt

hmac-bcrypt Этот репозиторий содержит эталонные реализации функции хеширования паролей hmac-bcrypt на нескольких языках. Каждая эталонная реализация стремится быть портом 1:1 оригинальных реализаций на C и Perl, созданных @epixoip, где это возможно, и полностью совместима с другими реализациями...

hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

Hibernate Validator Version: 6.0.17.Final - 13-06-2019 이것은 무엇인가요? 이것은 JSR-380 - Bean Validation 2.0의 참조 구현입니다. Bean Validation은 JavaBean 및 메서드 검증을 위한 메타데이터 모델과 API를 정의합니다. 기본 메타데이터 소스는 어노테이션이며, XML 검증 설명자를 사용하여 메타데이터를 재정의하고 확장할 수 있습니다. 문서 이 릴리스의 문서는 배포 패키지의 docs 디렉터리에 포함되어 있거나 온라인에서 확인할 수 있습니다. 릴...

noise-java

Библиотека Noise-Java Noise-Java — это реализация протокола Noise на чистой Java, предназначенная в качестве эталонной реализации. Код распространяется на условиях лицензии MIT. Эта библиотека написана на чистой Java и использует Java Cryptography Extension JCE для предоставления криптографически...

Astra Linux – Vulnerability in Python 3.7, PHP 7.3

The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...

python-tuf v7.0.1

A Framework for Securing Software Update Systems The Update Framework TUF is a framework for secure content delivery and updates. It protects against various types of supply chain attacks and provides resilience to compromise. This repository is a reference implementation written in Python. It is...

CVE-2026-68515

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied,...

UBUNTU-CVE-2026-68514

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings contain a heap out-of-bounds write triggered when reading a crafted deep...

UBUNTU-CVE-2026-68515

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied,...

CVE-2026-68513

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 contain a heap buffer overflow in PyOpenEXR triggered by a channel-name key collision between literal and prefixed...

CVE-2026-59981

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::ro...

CVE-2026-62986

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a crafted deep scanline EXR that uses...

CVE-2026-59985

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to a heap out-of-bounds read. The issue occurs when ...

CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

UBUNTU-CVE-2026-62986

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a crafted deep scanline EXR that uses...

UBUNTU-CVE-2026-59982

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

CVE-2026-59984

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds write. When a crafted...