wolfSSL（CyaSSL） 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, designed for developers working with embedded systems. Versions of wolfSSL CyaSSL prior to version 5.8.4 contained security vulnerabilities. These vulnerabilities stemmed from logical...

PT-2026-26368

Heap-based buffer overflow in the KCAPI ECC code path of wc ecc import x963 ex in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkey raw buffer via a crafted oversized EC public key point. The WOLFSSL KCAPI ECC code path copies the input to...

CVE-2026-28500

A flaw was found in Open Neural Network Exchange ONNX, an open standard for machine learning interoperability. A security control bypass exists in the onnx.hub.load function due to improper logic in its repository trust verification. An attacker can exploit this by providing a malicious model,...

CVE-2026-22323

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22323 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22322

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22322 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22320

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22320 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22316

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22316 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-31938

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31938 2026-03-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116248296001564766 2026-03-18 04:30:30+00:00| seen|...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

UBUNTU-CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500 ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-4318

creationtimestamp| type| source ---|---|--- 2026-03-17 10:31:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116244052137878986 2026-03-17 22:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbxxu7hht2s...

CVE-2026-4208

creationtimestamp| type| source ---|---|--- 2026-03-17 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116244049393964932 2026-03-17 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhardlwxe22o...

CVE-2026-4157

creationtimestamp| type| source ---|---|--- 2026-03-17 06:28:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116243096592688532 2026-04-11 02:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6sc23blx2m 2026-04-11 03:21:29+00:00| seen|...

CVE-2026-4252

creationtimestamp| type| source ---|---|--- 2026-03-17 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242987588275568 2026-03-20 12:34:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3024 2026-04-03 21:00:14+00:00| seen|...

CVE-2026-23489

creationtimestamp| type| source ---|---|--- 2026-03-17 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242633628583910 2026-03-18 15:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhdqurfkas2a 2026-08-05 15:00:07+00:00| published-proof-of-concept|...