GHSA-J48Q-4C78-RHF9 openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...

openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...

CVE-2026-33041

WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...

CVE-2026-33041

WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...

MAL-2025-44879 Malicious code in kite-whirlpool-bvb755-project (npm)

The package kite-whirlpool-bvb755-project was found to contain malicious code...

Malicious code in kite-whirlpool-bvb755-project (npm)

The package kite-whirlpool-bvb755-project was found to contain malicious code...

Malicious code in cat-whirlpool-mhx700-project (npm)

The package cat-whirlpool-mhx700-project was found to contain malicious code...

Malicious code in whirlpool-yawn-tcl905-project (npm)

The package whirlpool-yawn-tcl905-project was found to contain malicious code...

Malicious code in piano-whirlpool-wid643-project (npm)

The package piano-whirlpool-wid643-project was found to contain malicious code...

MAL-2025-39148 Malicious code in whirlpool-nebula-wii811-project (npm)

The package whirlpool-nebula-wii811-project was found to contain malicious code...

Malicious code in whirlpool-kite-gfa567-project (npm)

The package whirlpool-kite-gfa567-project was found to contain malicious code...

Malicious code in iguana-whirlpool-mpq809-project (npm)

The package iguana-whirlpool-mpq809-project was found to contain malicious code...

Malicious code in whirlpool-reef-pgo769-project (npm)

The package whirlpool-reef-pgo769-project was found to contain malicious code...

Malicious code in eagle-whirlpool-mph288-project (npm)

The package eagle-whirlpool-mph288-project was found to contain malicious code...

Malicious code in dragon-whirlpool-sze629-project (npm)

The package dragon-whirlpool-sze629-project was found to contain malicious code...

MAL-2025-24398 Malicious code in kelp-whirlpool-rjg403-project (npm)

The package kelp-whirlpool-rjg403-project was found to contain malicious code...

Malicious code in whirlpool-nebula-wii811-project (npm)

The package whirlpool-nebula-wii811-project was found to contain malicious code...

Malicious code in whirlpool-zenith-pjh894-project (npm)

The package whirlpool-zenith-pjh894-project was found to contain malicious code...

Malicious code in meadow-whirlpool-yfm106-project (npm)

The package meadow-whirlpool-yfm106-project was found to contain malicious code...

Malicious code in valley-whirlpool-rcb252-project (npm)

The package valley-whirlpool-rcb252-project was found to contain malicious code...