CLEANSTART-2026-DY37532 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Security vulnerability affects the cortex-fips package. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)

Summary A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation which may result in a denial of service. Microsoft Azure Identity is used by IBM Robotic Process Automation for authentication processing. This bulletin identifies the security fixes to apply to...

CVE-2019-20138

The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's cryptopwhashstr is not used...

Use of Cache Containing Sensitive Information

Overview @workos-inc/authkit-nextjs is an Authentication and session helpers for using WorkOS & AuthKit with Next.js Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to missing anti-caching headers on authenticated responses. An attacker can ga...

MGASA-2025-0285 Updated perl-Authen-SASL packages fix security vulnerability

Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. CVE-2025-40918...

[SECURITY] [DLA 4352-1] python-authlib security update

Debian LTS Advisory DLA-4352-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2025 https://wiki.debian.org/LTS Package : python-authlib Version : 0.15.4-1+deb11u1 CVE ID : CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 Multiple...

Debian dla-4352 : python-authlib-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4352 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4352-1 [email protected]...

SUSE-SU-2025:3754-1 Security update for python-Authlib

This update for python-Authlib fixes the following issues: - CVE-2025-61920: limited the size of the header to prevent DoS bsc1251921...

EUVD-2019-10044

Malware in sbrugna...

EUVD-2008-2662

Malware in sbrugna...

EUVD-2025-20283

Malicious code in bioql PyPI...

EUVD-2025-4279

Malicious code in bioql PyPI...

EUVD-2022-7285

Malicious code in bioql PyPI...

EUVD-2024-2098

Malicious code in bioql PyPI...

EUVD-2023-1154

Malicious code in bioql PyPI...

EUVD-2024-3569

Malicious code in bioql PyPI...

OESA-2025-2069 restic security update

restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fixes: A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library Cloud Software the affected version unknown. It has been rated as problematic.Using CWE...

MAL-2025-15085 Malicious code in auth-jwt-csrf-kinetic (npm)

The package auth-jwt-csrf-kinetic was found to contain malicious code...

Catalyst::Authentication::Credential::HTTP 安全漏洞

Catalyst::Authentication::Credential::HTTP is a Catalyst open source HTTP basic and digest authentication library. A security vulnerability exists in Catalyst::Authentication::Credential::HTTP version 1.018 and earlier that stems from the use of a non-strongly encrypted source to generate a nonce...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...