Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack through the sample and samplematrix functions in FrodoEngine.java. An attacker can recover information about the sampled noise values by observing how long Frodo key generation or encapsulation takes when it processes...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to the verifybyte expected function in JcaContentVerifierProviderBuilder. An attacker can forge a protected CMP/PKI message by supplying an empty composite signature sequence that...

CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

CVE-2025-14813 GOSTCTR implementation unable to process more than 255 blocks correctly

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82...

CVE-2025-14813 GOSTCTR implementation unable to process more than 255 blocks correctly

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82...

PT-2026-33188

ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

PT-2026-33223

Name of the Vulnerable Software and Affected Versions OAuth2 Proxy versions prior to 7.15.2 Description An authorization bypass exists within the email domain enforcement option. An attacker can authenticate using a malformed email claim, such as [email protected]@company.com, to satisfy an allow...

CloudStorageHunter-Pro

🔥 CloudStorageHunter-Pro 🚀 Ultimate Cloud Storage Security...

PT-2026-34190

Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description The OIDC authentication provider unconditionally sets SkipClientIDCheck: true in the go-oidc verifier configuration. This disables the standard audience aud claim validation at the library level,...

SUSE-SU-2026:21107-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

SUSE-SU-2026:21186-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

OPENSUSE-SU-2026:20525-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, github-mcp-server, mariadb-operator, metacontroller, temporal, karpenter, supercronic, aws-network-policy-agent, go, local-path-provisioner, polaris, goreleaser, rabbitmq-messaging-topology-operator, fluxcd-kustomize-mutating-webhook,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, otel-cli, rancher-agent, govulncheck, nri-redis, bom, knative-operator, addon-resizer, sftpgo, step-ca, wuzz, amazon-cloudwatch-agent-operator, amazon-k8s-cni, nsc, postgres-operator, terraform-provider-sendgrid, kubescape, whereabouts, dex,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, otel-cli, rancher-agent, govulncheck, nri-redis, bom, knative-operator, addon-resizer, sftpgo, step-ca, wuzz, amazon-cloudwatch-agent-operator, postgres-operator, nsc, terraform-provider-sendgrid, kubescape, whereabouts, dex,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gitlab-pages, falco-exporter, mesosphere-vsphere-csi, promxy, terraform-provider-aws, otel-cli, prometheus-operator, rancher-agent, k8ssandra-operator, terraform-provider-pagerduty, helm-mapkubeapis, kyverno, argo-rollouts, buildah, bom, kargo,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: gitlab-pages, falco-exporter, mesosphere-vsphere-csi, promxy, terraform-provider-aws, otel-cli, prometheus-operator, rancher-agent, k8ssandra-operator, terraform-provider-pagerduty, helm-mapkubeapis, kyverno, argo-rollouts, buildah, bom, kargo,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, terraform-provider-aws, otel-cli, rancher-agent, govulncheck, nri-redis, gosu, bom, xcover, knative-operator, addon-resizer, sftpgo, trust-manager, step-ca, wuzz, amazon-cloudwatch-agent-operator, amazon-k8s-cni, nsc, postgres-operator,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: opentofu, kubescape-server-fips, k9s-fips, tflint-fips, terraform, kubescape-server, crossplane-provider-terraform-fips, kubescape, grype-db, steampipe, syft-fips, tflint, wolfictl, terraform-fips, terragrunt-fips, zarf, conftest-fips, tfsec, cg, zot, trivy-fips, kot...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: opentofu, kubescape-server-fips, k9s-fips, tflint-fips, terraform, kubescape-server, crossplane-provider-terraform-fips, kubescape, grype-db, steampipe, syft-fips, tflint, wolfictl, terraform-fips, terragrunt-fips, zarf, conftest-fips, tfsec, cg, zot, trivy-fips, kot...