ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

ephemera

Ephemera : Zero-Trust SSH Certificate Authority Ephemera is a lightweight, self-hosted SSH Certificate Authority designed to enforce Zero-Trust access for infrastructure. It replaces static SSH keys with short-lived certificates, integrates hardware-backed WebAuthn MFA, and maintains...

root-signing

Sigstore root-signing root-signing project maintains the TUF repository used to securely deliver the Sigstore trust root trustedroot.json to Sigstore clients. Documentation signer manual documents the process and requirements from keyholder perspective maintainer manual documents some maintenance...

CVE-2022-2414

CVE-2022-2414 CVE-2022-2414 POC 1. Replace YOURHOST with your target like below url url = "https://example.com/ca/rest/certrequests"...

CLEANSTART-2026-NS27201 Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity

Security vulnerability affects the cosign package. Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity...

CLEANSTART-2026-MR44243 Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity

Security vulnerability affects the tekton-chains package. Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity...

Amazon Linux 2023 : ecs-init (ALAS2023-2026-3359)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3359 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : compat-golang-github-cpuguy83-md2man-2-devel, golang-github-cpuguy83-md2man, golang-github-cpuguy83-md2man-devel (ALAS2023-2026-3362)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3362 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-4063)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5700.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4063 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authorit...

Amazon Linux 2 : golist (ALAS-2026-4064)

The version of golist installed on the remote host is prior to 0.10.1-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4064 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go'...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-153)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-153 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2026-130)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-130 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-131)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-131 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-132)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-132 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specif...

Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang-github-burntsushi-toml-test

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : rclone (ALAS2023-2026-3348)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3348 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : oci-add-hooks (ALAS2023-2026-3346)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3346 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...