golang.org/x/crypto/ssh: FIDO/U2F security key physical presence check can be bypassed
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did
2026-06-26 归档
今日共收录 1370 条安全情报，包含 648 个 CVE，378 篇安全通告，以及 115 篇研究论文。
← 返回归档列表golang.org/x/crypto/ssh: Invoking client can cause server deadlock on unexpected responses
CVE-2026-39830
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection
golang.org/x/crypto/ssh/agent doesn't drop invoking agent constraints when forwarding keys
CVE-2026-39832
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serializ
golang.org/x/crypto/ssh/agent doesn't enforce invoking key constraints
CVE-2026-39833
The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enf
Lemur user-update path stores plaintext passwords
CVE-2026-55164
## Summary `lemur.users.service.update()` writes a user's new password as plaintext to the `users.password` column. The
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
CVE-2026-48529
### Summary When running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-glo
The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM...
CVE-2026-56445
The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.pa
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
CVE-2026-48517
## Summary MessagePack-CSharp's typeless deserialization includes `MessagePackSerializerOptions.ThrowIfDeserializingTyp
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
iOS 18.7.5 and iPadOS 18.7.5