CVE-2026-6966

Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users to bypass the TUF signature threshold requirement by duplicating a valid signature, causing the client to accept forged delegated role...

CVE-2026-6966

The CVE-2026-6966 issue affects awslabs/tough prior to tough-v0.22.0, where improper verification of cryptographic signature uniqueness in delegated role validation can allow remote authenticated users to bypass the TUF signature threshold by duplicating a valid signature, causing the client to a...

Amazon tough 数据伪造问题漏洞

Amazon Tough is a Rust client library for The Update Framework TUF by Amazon Inc. Versions of Amazon Tough prior to v0.22.0 contained a data manipulation vulnerability. This vulnerability stemmed from improper validation of the encryption signature uniqueness during delegated role verification. A...

Unity Linux 20.1070e Security Update: opensc (UTSA-2025-680622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680622 advisory. A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library. Tenable has extract...

kestra 跨站脚本漏洞

kestra is a workflow automation platform from Kestra open source. A cross-site scripting vulnerability exists in versions prior to kestra 0.22.0 that stems from improper handling of an error message in the Execution Overview tab and could lead to a stored cross-site scripting attack...

Jib 安全漏洞

Jib is a GoogleContainerTools open source library. It is used to build container images for your Java applications. A security vulnerability exists in versions of Jib prior to 0.22.0 that stems from the ease with which an attacker can execute input via the isDockerInstalled function resulting in...

DEBIAN-CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

AZL-9482 CVE-2021-42779 affecting package opensc for versions less than 0.22.0-1

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...