GHSA-VC8P-8PXG-RFWG ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing

Summary The DER parser used for application-supplied private keys did not safely validate encoded length values before converting them to Int values or allocating arrays. A malformed private-key file could encode a length that overflowed or wrapped around, or request an allocation much larger tha...

LiteLLM Has a Leakage of Langfuse API Keys

In berriai/litellm version v1.52.1, an issue in proxyserver.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfusesecret and langfusepublickey, which can provide full access to the Langfuse...

Mandriva Update for perl-URPM MDVA-2010:226 (perl-URPM)

Check for the Version of perl-URPM OpenVAS Vulnerability Test Mandriva Update for perl-URPM MDVA-2010:226 perl-URPM Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for perl-URPM MDVA-2010:226 (perl-URPM)

Check for the Version of perl-URPM OpenVAS Vulnerability Test Mandriva Update for perl-URPM MDVA-2010:226 perl-URPM Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:226 : perl-URPM

This advisory fixes the gpg keys parsing, which were resulting in some warnings bug 61636. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatical...

Gaim-Encryption plugin DoS

Attempt to access unallocated memory on keys parsing...