AlmaLinux 9.2 [TuxCare] Security Update: python3.11-cryptography (ALMALINUX9.2:CLSA-2025:1763137741)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763137741 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

SUSE CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time: - The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop. - The verification key ...

CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

DEBIAN-CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

UBUNTU-CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100798 Cryptography misuse in Storage: Quota Manager component

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100798 Cryptography misuse in Storage: Quota Manager component

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

EUVD-2026-88951

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...

CVE-2026-100798

A cryptography misuse vulnerability exists in the Storage: Quota Manager component of certain Mozilla products. The issue involves a missing cryptographic step (CWE-325), potentially impacting data security. This vulnerability has been addressed in Firefox ESR 153.4 , Thunderbird 157 , Thunderbir...

CLEANSTART-2026-WC97010 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers

Security vulnerability affects the apache-superset package. cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

PT-2026-108561

Security vulnerability affects the apache-superset package. cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

CVE-2026-100798: Missing Cryptographic Step

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

PT-2026-102572

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description The Storage: Quota Manager component contains a cryptography misuse issue. Recommendations Update Firefox to version 157. Update...

Oracle Linux 10 : python-cryptography (ELSA-2026-71658)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71658 advisory. 43.0.0-4 - Fix CVE-2026-69249: add X.509 signature validation budget Tenable has extracted the preceding description block directly from the Oracle Linux...

AZL-104991 CVE-2026-102268 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

A flaw was found in the Linux kernel's Tegra cryptography module. An incorrect calculation in the 'tegragcmdoonereq' function, specifically when handling the 'cryptlen' parameter, can occur if a caller does not properly initialize the authentication size. This can lead to a write beyond the...

CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...