CVE-2026-74893

Mô tả

Tham khảo

• jahlives/openssl_encrypt security advisory · ADVISORY
• vulncheck.com/advisories/openssl-encrypt-before-jwt-token-forgery-via-hardcoded-secrets · ADVISORY

Lỗ hổng khác của openssl-encrypt

• CVE-2026-81721CAO 7.5openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to tr…
• CVE-2026-81720TRUNG BÌNH 6.2openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger…
• CVE-2026-81719CAO 7.8openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WAR…
• CVE-2026-81717THẤP 3.5openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model tre…
• CVE-2026-81716TRUNG BÌNH 5.2openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized …