Forge: AES-GCM authentication bypass via unvalidated tagLength option
CVE-2026-119186
### Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start(). With a tagLength
#cwe-354
共收录 82 条相关情报。
← 返回所有主题Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
CVE-2026-118782
### Summary forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and t
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option pas...
CVE-2026-119186
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#12 password-based ...
CVE-2026-118782
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used decipher.finish(), CBC and ...
CVE-2026-118776
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the
zip: AES Entry HMAC Authentication Bypass on Premature EOF
CVE-2026-115906
### Summary An AES-encrypted (AE-x) entry's authentication code is verified only when the reader's byte counter lands e
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....
CVE-2026-90720
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__in...
CVE-2026-116608
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function
The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the {aes_gcm, Bits} clause of b...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacke
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the atta...
CVE-2026-115906
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry
virtualenv: Downloaded wheel selection and caching precede verification
CVE-2026-113714
## Summary Wheel downloads go directly into the reusable wheelhouse, while the verification target is selected from pip
When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone who...
CVE-2026-35501
When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an addi
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly into the reusable wheel/house ...
CVE-2026-113714
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes packag
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
CVE-2026-28854
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
CVE-2026-85747
### Summary `registry/client.(*manifests).Get(ctx, dgst, …)` fetches a manifest by digest but never hashes the returned
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks ...
CVE-2026-109366
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allo
Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - w...
CVE-2026-105280
Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarbal
Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height
CVE-2026-109366
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allo
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to...
CVE-2026-84900
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP ha
A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive c...
CVE-2026-93318
A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versio