kl-security-key

KL Security Key 由 Karaaslan Labs 开发的实验性开源 RP2040 FIDO2/WebAuthn 认证器工程与互操作性项目。 状态： 工程/研究项目。未获得 FIDO 联盟认证。 并非商业高保障安全令牌。 KL Security Key 是 polhenarejos/pico-fido 的精选衍生项目。它探索在保持身份、认证、验证证据和信任边界明确的前提下，低成本 RP2040 开发板作为物理 WebAuthn 认证器能够达到的程度。 概览 领域| 当前工程参考 ---|--- 硬件| RP2040 USB 开发板 传输| USB FIDO HID...

booster

Booster - Linux向けの高速で安全かつモダンなinitramfs Boosterは、初期ブートをより軽快に、より高速に、より信頼できるものにします。 コンパクトなinitramfsイメージを構築し、Linuxシステムをファームウェアから実際のルートファイルシステムへと、手間を最小限に抑えつつ強力な暗号化ブートサポートとともに移行させます。 大規模で汎用的な初期ユーザースペースを詰め込む代わりに、Boosterはマシンが実際に必要とするものを検出し、それに合わせた焦点を絞ったイメージを構築します。...

libfido2

== libfido2 image:https://github.com/yubico/libfido2/workflows/linux/badge.svg"Linux Build Status github actions", link="https://github.com/Yubico/libfido2/actions" image:https://github.com/yubico/libfido2/workflows/macos/badge.svg"macOS Build Status github actions",...

poseidon

██████╗ ██████╗ ███████╗███████╗██╗██████╗ ██████╗ ███╗ ██╗ ██╔══██╗██╔═══██╗██╔════╝██╔════╝██║██╔══██╗██╔═══██╗████╗ ██║ ██████╔╝██║ ██║███████╗█████╗ ██║██║ ██║██║ ██║██╔██╗ ██║ ██╔═══╝ ██║ ██║╚════██║██╔══╝ ██║██║ ██║██║ ██║██║╚██╗██║ ██║ ╚██████╔╝███████║███████╗██║██████╔╝╚██████╔╝██║ ╚████...

gEnclave

======== gEnclave .. image:: https://gitlab.com/renich/genclave/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gEnclave banner | .. image:: https://gitlab.com/renich/genclave/badges/master/pipeline.svg :target: https://gitlab.com/renich/genclave/-/commits/master :alt: pipeline...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

securix v0.19.1

SécurixOS: Secure OS Workstation Base !NOTE This project is in alpha , no support is offered at this time. Objectives SécurixOS is a NixOS distribution developed by DINUM to equip secure computers for system administration, office work and development in order to handle Unprotected information...

CVE-2026-19117

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

EUVD-2026-70252

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

CVE-2026-19117

CVE-2026-19117 affects Delinea Secret Server in on-premises deployments . Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and subsequently authenticate as that user, effectively bypassing authentication. The vulnerability is rat...

CVE-2026-19117 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

PT-2026-84847

Name of the Vulnerable Software and Affected Versions Delinea Secret Server On-Prem versions 10.6.0 through 11.7.61 Delinea Secret Server On-Prem versions 11.8.0 through 11.8.1 Delinea Secret Server On-Prem versions 11.9.0 through 11.9.47 Delinea Secret Server On-Prem versions 12.0.0 through...

CVE-2026-19117: Authentication Bypass by Spoofing

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

[SECURITY] Fedora 44 Update: python-pynitrokey-0.12.3-4.fc44

A command line interface for the Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 and NetHSM. Includes commands for managing enrolled keys, opening encrypted storage, and generating OTPs...

CVE-2026-74870

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...

CVE-2026-74870: Insertion of Sensitive Information into Log File

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...

CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

SUSE CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...