The vulnerability of the CI/CD system’s continuous integration and delivery capabilities in JetBrains TeamCity arises from the use of an algorithm that does not meet security requirements for hash functions. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to the use of an algorithm that does not meet security requirements for the hash function. Exploiting this vulnerability can allow a malicious actor to bypass existing...

CVE-2022-39237: Improper Verification of Cryptographic Signature

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...