oqsprovider Security Vulnerabilities

oqsprovider is a library from the Open Quantum Safe personal developer. A security vulnerability exists in oqsprovider 0.6.0 and earlier versions, which stems from a flaw in oqs-provider's handling of the length of serialized mixed-key and signature-beginning decodings, where incorrectly-formatte...

mina-sshd: Java unsafe deserialization vulnerability

A flaw was found in Apache MINA SSHD, when using Java deserialization to load a serialized java.security.PrivateKey. An attacker could benefit from unsafe deserialization by inserting unsecured data that may affect the application or server...