625 matches found
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, frankenphp-8.4, caddy-fips, frankenphp-8.5, frankenphp-8.2, caddy, frankenphp-8.3, step-ca-fips...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, opentelemetry-operator, aws-privateca-issuer, mariadb-operator, cert-manager-openshift-routes, percona-xtradb-cluster-operator-fips, mariadb-operator-fips, cert-manager-csi-driver-fips, step-issuer, cert-manager-cmctl-fips,...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, aws-privateca-issuer-fips, cert-exporter-fips, cert-manager-cmctl, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer-fips, cert-manager-webhook-pdns-fips, cert-exporter, step-issuer...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step, caddy, step-ca, step-issuer...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step, caddy, step-ca, step-issuer...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: rclone, buf, kyverno-policy-reporter-ui, step-issuer, caddy, step-ca, tkn, gitness, gogatekeeper, sftpgo, step, cloudflared, karma...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl, aws-privateca-issuer...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: opentelemetry-operator, step-issuer, cert-manager-csi-driver, cert-manager-istio-csr, percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, mariadb-operator...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, amazon-cloudwatch-agent-operator, cilium-cli, controller-gen, k3d, nri-mysql, k8sgpt, gptscript, chart-testing, aactl, polaris, rabbitmq-cluster-operator, eksctl, ko, dive, terraform-provider-azapi, harbor-registry, wait-for-port...
CVE-2026-18353
A flaw was found in PIA. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF vulnerability by crafting a malicious OpenID Connect OIDC issuer URL. This bypasses an internal allowlist due to inconsistent URL parsing between Python's urlparse and the requests/urllib3 librarie...
python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens
A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...
python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens
A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...
python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens
A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...
CVE-2026-69092
CVE-2026-69092 affects Admidio versions before 5.0.11. The issue is a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or Ligh...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...
Improper Certificate Validation
Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats...
Improper Certificate Validation
Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats t...
SUSE CVE-2026-49998
Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse a key for one allowed issuer to verify a JWT for another allowed issuer because the JWKS cache and singleflight lookup were keyed only by JWT header kid, not...