7 matches found
PYSEC-2026-3958
In opensslencrypt pip package openssl-encrypt versions = 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument on both encrypt and decrypt paths instead of via an environment variable as done for the main password...
PYSEC-2026-3958
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-81684
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-81684
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-81684 openssl_encrypt before 1.4.9 Information Disclosure via Command Line
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-81684: Invocation of Process Using Visible Sensitive Information
In opensslencrypt pip package openssl-encrypt versions = 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument on both encrypt and decrypt paths instead of via an environment variable as done for the main password...
