sops

SOPS：Secrets OPerationS SOPS 是一款加密文件编辑器，支持 YAML、JSON、ENV、INI 和 BINARY 格式，并可利用 AWS KMS、GCP KMS、Azure Key Vault、华为云 KMS、age 和 PGP 进行加密。（演示视频 ） .. image:: https://i.imgur.com/X0TM5NI.gif .. image:: https://pkg.go.dev/badge/github.com/getsops/sops/v3.svg :target:...

cosign

cosign 使用 Sigstore 对 OCI 容器（及其他制品）进行签名！ Cosign 旨在让签名成为无形的基础设施 。 Cosign 支持： 使用 Sigstore 公益 Fulcio 证书颁发机构和 Rekor 透明日志进行“无密钥签名”（默认） 硬件和 KMS 签名 使用 cosign 生成的加密私钥/公钥对进行签名 在 OCI 注册表中进行容器签名、验证和存储。 自带 PKI 信息 Cosign 是作为 sigstore 项目的一部分开发的。 我们还使用一个 slack 频道！ 点击此处获取邀请链接。 安装 有关 Homebrew、Arch、Nix、GitHub Actio...

Zeus

Zeus AWS 監査 & 強化ツール Zeus は、AWS EC2 / S3 / CloudTrail / CloudWatch / KMS のベストプラクティス強化のための強力なツールです。ユーザーが作成したプロファイルに従ってセキュリティ設定をチェックし、ユーザーの要求に応じて CIS AWS Benchmark ソースに基づいた推奨設定に変更します。 現在はログメカニズムのみを含んでいます。 Identity and Access Management 「root」アカウントの使用を避ける すべての IAM ユーザーにコンソールパスワードがある場合は多要素認証 MFA を有効にす...

CVE-2026-106429

A flaw was found in libmongocrypt. An integer underflow in the Key Management Service KMS endpoint-parsing logic can cause a memory allocation failure when processing a malformed endpoint. An authenticated user can trigger this flaw by modifying a key document in the key vault collection or by...

pyrite

面向 Crystal 的硬件绑定与云门控二进制执行及防篡改信封密封。 什么是 Pyrite？ Pyrite 确保你编译后的 Crystal 二进制文件仅在你授权的基础设施上执行 。如果对手提取、泄露、窃取或修改了该二进制文件，执行会在任何应用逻辑或机密暴露之前立即停止。 核心安全保障 1. 硬件与云执行绑定 ：二进制文件在静态时是 不完整的 。核心运行配置和密钥被封存在一个信封中，只有物理主板的 TPM 2.0 芯片 （systemd-creds）或 Google Cloud Run IAM / Cloud KMS 才能解密。 2. 实时自完整性（防篡改） ：在启动时，Pyrite 计算...

CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429

A vulnerability exists in the MongoDB libmongocrypt KMS endpoint-parsing logic due to an integer underflow . This flaw can lead to an allocation failure that terminates the application process, resulting in a denial of service . The issue is triggered when an authenticated user modifies a key doc...

Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

EUVD-2026-95160

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

PT-2026-108135

Name of the Vulnerable Software and Affected Versions MongoDB libmongocrypt affected versions not specified Description An integer underflow exists in the KMS endpoint-parsing logic. This occurs when an authenticated user modifies a key document in the key vault collection, or when an application...

DEBIAN-CVE-2026-98309

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbind vc4kmsload calls drmkmshelperpollinit but the driver provides no matching drmkmshelperpollfini. The output poll work stays scheduled after unbind and runs on the freed...

CVE-2026-98309

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbind vc4kmsload calls drmkmshelperpollinit but the driver provides no matching drmkmshelperpollfini. The output poll work stays scheduled after unbind and runs on the freed...

PT-2026-106638

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbind vc4 kms load calls drm kms helper poll init but the driver provides no matching drm kms helper poll fini. The output poll work stays scheduled after unbind and runs on the fre...

GHSA-QX36-8MW2-4R3X PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

Summary PyMongo passed the KMS endpoint of a data key verbatim into parsehost, which returns any string ending in .sock unchanged instead of validating it as a hostname and port. The driver's connection code then treats such an address as a Unix domain socket path and connects to it with AFUNIX...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...