@1upmonster/duel (>=0.1.0, <=0.1.8), @flash_trade/magic-trade-client (>=0.1.0, <=1.0.51) +8 more potentially affected by CVE-2026-22696 via @phala/dcap-qvl-web (>=0.2.7, <=0.3.3)

@phala/dcap-qvl-web NPM version =0.2.7, =0.1.0, =0.1.0, =0.3.6, =0.2.9, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-22696 Source advisory: GHSA-796P-J2GH-9M2Q...

@1upmonster/duel (>=0.1.0, <=0.1.8), @flash_trade/magic-trade-client (>=0.1.0, <=1.0.51) +8 more potentially affected by CVE-2026-22696 via @phala/dcap-qvl-web (>=0.2.7, <=0.3.3)

@phala/dcap-qvl-web NPM version =0.2.7, =0.1.0, =0.1.0, =0.3.6, =0.2.9, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-22696 Source advisory: OSV:GHSA-796P-J2GH-9M2Q...

@runhalodev/cli (>=0.0.1, <=0.0.3), nearai-cloud-verifier (0.0.1-alpha.1) potentially affected by CVE-2026-22696 via @phala/dcap-qvl-node (0.3.3)

@phala/dcap-qvl-node NPM version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @phala/dcap-qvl-node and may be impacted: - @runhalodev/cli =0.0.1, =0.0.3 - nearai-cloud-verifier 0.0.1-alpha.1 Source cves: CVE-2026-22696 Source advisory:...

GHSA-796P-J2GH-9M2Q dcap-qvl has Missing Verification for QE Identity

Impact This vulnerability involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity, qeidentitysignature, and qeidentityissuerchain from the PCCS. However, it skips to verify the QE Identity signature...

@runhalodev/cli (>=0.0.1, <=0.0.3), nearai-cloud-verifier (0.0.1-alpha.1) potentially affected by CVE-2026-22696 via @phala/dcap-qvl-node (0.3.3)

@phala/dcap-qvl-node NPM version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @phala/dcap-qvl-node and may be impacted: - @runhalodev/cli =0.0.1, =0.0.3 - nearai-cloud-verifier 0.0.1-alpha.1 Source cves: CVE-2026-22696 Source advisory:...

CVE-2026-22696: Improper Verification of Cryptographic Signature

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

PT-2026-4820

Name of the Vulnerable Software and Affected Versions dcap-qvl versions prior to 0.3.9 Description The dcap-qvl library contains a flaw in its quote verification logic. The library retrieves QE Identity collateral from the PCCS, but fails to verify the QE Identity signature against its certificat...

EUVD-2020-29614

Malware in sbrugna...

EUVD-2023-31021

Malicious code in bioql PyPI...

EUVD-2023-47208

Malicious code in bioql PyPI...

CVE-2023-42776

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

sgx-dcap-quote-verify-python (0.0.1) potentially affected by CVE-2024-26134 via cbor2 (5.0.1)

cbor2 PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cbor2 and may be impacted: - sgx-dcap-quote-verify-python 0.0.1 Source cves: CVE-2024-26134 Source advisory: OSV:PYSEC-2024-155...

Input validation

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

CVE-2023-42776

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

CVE-2023-42776

CVE-2023-42776 affects Intel® SGX DCAP software for Windows prior to version 1.19.100.3. The issue is improper input validation, potentially allowing an authenticated local user to disclose information. Intel recommends updating to 1.19.100.3 or later to remediate. Connected sources (Intel adviso...

CVE-2023-42776: Improper Input Validation

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

PT-2024-1910 · Intel · Intel Sgx Dcap

Name of the Vulnerable Software and Affected Versions: IntelR SGX DCAP software for Windows versions prior to 1.19.100.3 Description: The issue is related to insufficient input validation in the Intel SGX DCAP software, which may allow an authenticated user to potentially enable information...

Intel® SGX DCAP Software Advisory

Summary: A potential security vulnerability in some Intel® Software Guard Extensions SGX Data Center Attestation Primitives DCAP software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42776...

Makves DCAP Access Control Bypass

The vulnerability of the Makves DCAP software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...