566 matches found
Malicious code in acme-http-01-sequelize (npm)
The package acme-http-01-sequelize was found to contain malicious code...
Malicious code in acme-http-01-s3 (npm)
The package acme-http-01-s3 was found to contain malicious code...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
MAL-2025-14007 Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
MAL-2025-14012 Malicious code in acme-react-components (npm)
The package acme-react-components was found to contain malicious code...
MAL-2025-14010 Malicious code in acme-http-01-s3 (npm)
The package acme-http-01-s3 was found to contain malicious code...
GO-2025-3847 Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego...
CVE-2025-54799 vulnerabilities
Vulnerabilities for packages: sftpgo, traefik, terraform-provider-acme...
GHSA-Q82R-2J7M-9RV4 vulnerabilities
Vulnerabilities for packages: sftpgo, traefik, terraform-provider-acme...
CVE-2025-54799 vulnerabilities
Vulnerabilities for packages: terraform-provider-acme-fips, traefik-fips, terraform-provider-acme, traefik, sftpgo...
SUSE CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
DEBIAN-CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
UBUNTU-CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...