27976 matches found
CVE-2026-81681
opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...
CVE-2026-81684
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
PYSEC-2026-3791
opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...
CVE-2026-81683
opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...
CLSA-2026-1787848037 openssl: Fix of 2 CVEs
CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms...
CLSA-2026-1787843511 openssl: Fix of 2 CVEs
CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms...
CVE-2026-81717
openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in its portable USB drive feature, whose threat model assumes an attacker with physical write access to the drive. First, USBDriveCreator._verify_integrity_file validates only files listed in the manifest, so an at...
CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...
EUVD-2026-67065
opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...
CVE-2026-81715 openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...
CVE-2026-81715 openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...
CVE-2026-81714
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
CVE-2026-81714 openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
EUVD-2026-67064
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
CVE-2026-81714
openssl_encrypt (pip package openssl-encrypt) versions ≤ 1.4.8 are vulnerable to a plugin-signing trust anchor enrollment bypass in the enroll_trust_key function. The function uses suffix-tolerant fingerprint matching , so an operator who confirms a short (~32-bit) GPG key ID could unknowingly en...
CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...
CVE-2026-81705
openssl-encrypt versions before 1.4.9 fail to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g., -apHunter2) or abbreviated long-option spellings (e.g., --passw). The sanitizer only recognized exact option names, --option=valu...
CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...
EUVD-2026-67061
openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...