Tagged “osv”
CVEs tagged osv, newest first.
7180 CVEsRSS
CVE-2026-81706Medium· 6.8openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing
openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the corresponding own identity is deleted. Whe…
CVE-2026-81705High· 7.5openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer…
CVE-2026-81703Medium· 5.5openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing auth…
CVE-2026-81701Critical· 9.8openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malic…
CVE-2026-81700Critical· 9.8openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exi…
CVE-2026-81698High· 7.5openssl_encrypt before 1.4.9 Shell Injection via info command
openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like pepper_name…
CVE-2026-81696Low· 3.3openssl_encrypt before 1.4.9 Terminal Injection via info Command
openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verific…
CVE-2026-81695Low· 3.3openssl_encrypt before 1.4.9 Terminal Injection via key_id
openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id containing escape sequences to repaint term…
CVE-2026-81725Medium· 5.9nltk: NLTK: Regular Expression Denial of Service via malformed TEI blocks (CVE-2026-81725)
A flaw was found in NLTK, specifically within the Pl196xCorpusReader component. A remote attacker can exploit this by supplying malformed Text Encoding Initiative (TEI) blocks containing numerous unmatched opening tags. This triggers a reg…
CVE-2026-79720Medium· 5.0Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, …
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.
CVE-2026-81723Low· 3.7⚖ disputedNLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read
NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to caus…
RUSTSEC-2026-0272NonePanic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)
Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)
MAL-2026-14584NoneMalicious code in flyteplugins-redis (PyPI)
Malicious code in flyteplugins-redis (PyPI)
MAL-2026-14583NoneMalicious code in flyteplugins-nsight (PyPI)
Malicious code in flyteplugins-nsight (PyPI)
MAL-2026-14582NoneMalicious code in flyteplugins-echo (PyPI)
Malicious code in flyteplugins-echo (PyPI)
MAL-2026-14581NoneMalicious code in flyteplugins-agento11y (PyPI)
Malicious code in flyteplugins-agento11y (PyPI)
MAL-2026-14556NoneMalicious code in sap-quarterly-report (PyPI)
Malicious code in sap-quarterly-report (PyPI)
MAL-2026-14555NoneMalicious code in ekx-report-utils (PyPI)
Malicious code in ekx-report-utils (PyPI)
MAL-2026-14554NoneMalicious code in decoris (PyPI)
Malicious code in decoris (PyPI)
MAL-2026-14552NoneMalicious code in mathkitlite (PyPI)
Malicious code in mathkitlite (PyPI)
GHSA-mf7q-r4rv-jv94HighCrossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature…
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check
RUSTSEC-2026-0284NoneDouble free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`
Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`
CVE-2026-57171High· 7.7Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog-generate, profile-generate, and ssp-generate author comma…
RUSTSEC-2026-0277NonePath traversal in apimock-server's file-serving fallback
Path traversal in apimock-server's file-serving fallback
RUSTSEC-2026-0276NonePath traversal in apimock's file-serving fallback
Path traversal in apimock's file-serving fallback
CVE-2026-80206Medium· 5.9nltk: NLTK: Denial of Service vulnerability in tgrep module (CVE-2026-80206)
A flaw was found in NLTK, specifically within its tgrep module. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions. When processed, these exp…
CVE-2026-80205High· 7.5nltk: NLTK: Denial of Service via unvalidated regular expressions (CVE-2026-80205)
A flaw was found in NLTK. A remote attacker can exploit a regular expression denial of service (ReDoS) vulnerability in the `Text.findall()` and `TokenSearcher.findall()` methods. These methods accept user-supplied regular expressions with…
CVE-2026-79921High· 7.5amqp091-go is a Go AMQP 0.9.1 client
amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead …
CVE-2026-57170High· 7.8Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsection_include and md_clean_include re-par…
MAL-2026-14545Critical⚠ ExploitedMalicious code in pybitjs (PyPI)
Malicious code in pybitjs (PyPI)