Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods

A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language SAML setup, it fails to validate the NotOnOrAfter timestamp within the SubjectConfirmationData. This allows an attacker to delay the expiration of SAML...

Duplicate Advisory: gix-date can create non-utf8 string with `TimeBuf::as_str`

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6mw6-mj76-grwc. This link is maintained to preserve external references. Original Description A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid...

CVE-2025-11687

creationtimestamp| type| source ---|---|--- 2026-01-26 21:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde5xvf3c72h...

CVE-2026-0810

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

UBUNTU-CVE-2026-0810

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2026-24428

creationtimestamp| type| source ---|---|--- 2026-01-26 20:03:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde22izyzl2j 2026-01-27 01:04:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115964370964509737...

CVE-2020-36959

creationtimestamp| type| source ---|---|--- 2026-01-26 20:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddzujyacx2r...

EUVD-2026-4669

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2026-0810 Gix-date: gix-date: undefined behavior due to invalid string generation

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2026-0810

CVE-2026-0810 affects the gix-date library used in Rust projects. The issue arises in gix_date::parse::TimeBuf::as_str, which can emit strings containing invalid non-UTF8 characters, violating internal safety invariants of TimeBuf and causing undefined behavior when such strings are processed. Im...

CVE-2026-0810 Gix-date: gix-date: undefined behavior due to invalid string generation

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2026-0810

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2026-0810 Gix-date: gix-date: undefined behavior due to invalid string generation

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

CVE-2020-36952

creationtimestamp| type| source ---|---|--- 2026-01-26 17:19:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddquvbtou2m...

CVE-2025-69565

creationtimestamp| type| source ---|---|--- 2026-01-26 17:09:23+00:00| seen| https://gist.github.com/lih28984-commits/81d523afde3b122c652f652bab808e33...

CVE-2026-23888

creationtimestamp| type| source ---|---|--- 2026-01-26 15:42:53+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-6pfh-p556-v868 2026-01-27 01:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelh3443z2i...

CVE-2025-59108

creationtimestamp| type| source ---|---|--- 2026-01-26 11:54:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6qm6z2n2i...

CVE-2025-59103

CVE-2025-59103 concerns the Access Manager 92xx hardware revision K7. The Red Hat/NVD/CVE entries describe an SSH service exposed on port 22 with two users that have hardcoded and weak passwords, allowing SSH access. A key root-cause is that password randomization on first deployment is condition...

CVE-2026-1424

creationtimestamp| type| source ---|---|--- 2026-01-26 09:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcxojebin2n...

CVE-2026-1425

creationtimestamp| type| source ---|---|--- 2026-01-26 09:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcxfkvvbn2n 2026-01-26 10:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115961044303697007...