CVE-2026-48025

CVE-2026-48025 (nebula-mesh) describes a memory-safety issue in versions prior to 0.3.7 where decrypted CA private keys (ed25519.PrivateKey) are constructed and stored in memory by the CAManager and not wiped after use. The problem arises when internal/pki/resolver.go constructs CAManager with th...

CVE-2025-62705

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...

EUVD-2024-46524

Malicious code in bioql PyPI...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from wolfSSL, Inc. in the United States. A security vulnerability exists in wolfSSL version 5.5.0, which stems from an attacker's ability to perform a fault injection attack on RAM via Rowhammer,...