53900 matches found
PYSEC-2026-3801
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
EUVD-2026-67067
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
CVE-2026-81717
openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in its portable USB drive feature, whose threat model assumes an attacker with physical write access to the drive. First, USBDriveCreator._verify_integrity_file validates only files listed in the manifest, so an at...
CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
ROOT-OS-DEBIAN-12-CVE-2018-6829 CVE-2018-6829 in libgcrypt20 - Patched by Root
Root has patched CVE-2018-6829 in the libgcrypt20 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-48161 CVE-2023-48161 in giflib - Patched by Root
Root has patched CVE-2023-48161 in the giflib package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2020-23922 CVE-2020-23922 in giflib - Patched by Root
Root has patched CVE-2020-23922 in the giflib package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-31344 CVE-2025-31344 in giflib - Patched by Root
Root has patched CVE-2025-31344 in the giflib package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-6545 CVE-2025-6545 in pbkdf2 - Patched by Root
Root has patched CVE-2025-6545 in the pbkdf2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-6547 CVE-2025-6547 in pbkdf2 - Patched by Root
Root has patched CVE-2025-6547 in the pbkdf2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-5RRQ-PXF6-6JX5 GHSA-5rrq-pxf6-6jx5 in node-forge - Patched by Root
Root has patched GHSA-5rrq-pxf6-6jx5 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-SNYK-JS-AXIOS-9403194 SNYK-JS-AXIOS-9403194 in axios - Patched by Root
Root has patched SNYK-JS-AXIOS-9403194 in the axios package for Root:npm. Multiple fixed versions available...
PT-2026-82612
openssl encrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator. verify integrity file only validates files listed in the manifest, s...
EUVD-2026-44688
Cloudreve WebDAV /dav has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root...
ROOT-OS-DEBIAN-12-CVE-2024-41957 CVE-2024-41957 in vim - Patched by Root
Root has patched CVE-2024-41957 in the vim package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-39881 CVE-2026-39881 in vim - Patched by Root
Root has patched CVE-2026-39881 in the vim package for Root:Debian:12. Multiple fixed versions available...