438 matches found
IAGA-Sentinel
IAGA Sentinel The EU AI Act conformity evidence layer for AI agents. Cryptographically signed, replay-verifiable evidence of every action an agent routes through it, structured to support AI Act Article 12 record-keeping and Annex IV documentation. Documentation ยท Setup in one prompt ยท Quickstart...
Tyr
Tyr Peer-to-peer email on the Yggdrasil network. English | ะ ัััะบะธะน Screenshots | | | ---|---|---|--- | | | What is Tyr? Tyr runs a complete mail server o...
scopeblind-gateway
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...
scopeblind-gateway
โ ๏ธ This repository has moved. Active development continues at ScopeBlind/scopeblind-gateway. This personal fork may be behind the canonical repository. Please use the org repo for issues, pull requests, and the latest code. protect-mcp Security gateway for MCP servers. Shadow-mode logs by default,...
mcp-server-attestation
Parte delStudioMeyer MCP Stack โ Hecho en Mallorca ๐ด ยท โญ si lo usas mcp-server-attestation Endurecimiento de la cadena de suministro de capa 2 para servidores del Model Context Protocol. Manifiestos de herramientas firmados con Ed25519, atestaciรณn de spawn en tiempo de ejecuciรณn, saneador de...
Galdralag-firmware
Galdr โ Galdralag Firmware Open Invention Network This project is registered with theOpen Invention Network OIN. OIN is a defensive patent pool: members cross-license Linux-related patents so participants can ship and use open-source software with reduced patent exposure. Status: Waiting for:...
CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection
5. CVE-2026-1122 โ Bypass de firma de actualizaciรณn de firmware IoT mediante inyecciรณn de punto de orden bajo Resumen La verificaciรณn de firmware OTA de un dispositivo IoT utiliza una implementaciรณn Ed25519 defectuosa que no rechaza claves pรบblicas con componentes de orden pequeรฑo, lo que permite...
ed25519-unsafe-libs
ed25519-unsafe-libs Ataque de orรกculo a la funciรณn de firma con doble clave pรบblica sobre Ed25519 Una lista de librerรญas de firmas ed25519 potencialmente inseguras que permiten una api pรบblica donde la clave secreta y la clave pรบblica pueden proporcionarse de forma independiente como entradas de ...
EulerOS Virtualization 2.10.0 : libsolv (EulerOS-SA-2026-3871)
According to the versions of the libsolv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...
EulerOS 2.0 SP10 : libsolv (EulerOS-SA-2026-3700)
According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...
EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3784)
According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...
EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3809)
According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...
Astra Linux โ Vulnerability in bind9
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...
scopeblind-gateway v0.13.1
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...
golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input
A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial o...
securesystemslib v1.5.1
securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...
EUVD-2026-71717
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...
CVE-2026-53604
nebula-mesh (a self-hosted control plane for Slack Nebula mesh VPN by forgekeep ) is affected by a key-zeroization flaw in its web UI mobile-bundle path. The renderMobileBundle handler passes a decrypted *pki.CAManager containing the CA's ed25519 private key into mobilebundle.Build, which never c...
golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input
A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial o...
mcp-server-attestation v0.2.0
Part of theStudioMeyer MCP Stack โ Built in Mallorca ๐ด ยท โญ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...