PT-2026-109326

Name of the Vulnerable Software and Affected Versions Enclave OS Virtual versions prior to tdx-v0.2.43 Enclave OS Virtual versions prior to tdx-gpu-v0.6.27 Description The TDX/GPU RA-TLS certificate issuer places the certificate public-key hash and client nonce in the quote ReportData but fails t...

CVE-2025-5025

libcurl supports pinning of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC...

Null pointer dereference

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if pkcs12.serializekeyandcertificates is called with both a certificate whose public key did not match the provided private key and an...