CVE-2026-55967

The connected documents describe CVE-2026-55967 affecting wolfSSL’s AES-GCM streaming APIs, where extremely large cumulative single message sizes (>64 GiB) were not properly rejected. This allowed counter wrap and keystream reuse, potentially leading to plaintext recovery. The CVSS data provid...

EUVD-2026-39493

AES-GCM encryption/decryption with extremely large cumulative single message sizes 64 GiB were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery...

GHSA-PJ6F-RC94-GW53 Mattermost Fails to Sanitize File Names

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs...