CVE-2026-74889

概要

参考情報

• jahlives/openssl_encrypt security advisory · ADVISORY
• vulncheck.com/advisories/openssl-encrypt-before-weak-key-derivation-via-hkdf · ADVISORY

openssl-encrypt のその他の脆弱性

• CVE-2026-81721高 7.5openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to tr…
• CVE-2026-81720中 6.2openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger…
• CVE-2026-81719高 7.8openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WAR…
• CVE-2026-81717低 3.5openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model tre…
• CVE-2026-81716中 5.2openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized …