https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T12:47:18.983267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03194 bdu:2021-03194 2026-10-28T12:47:18.986964+00:00 bdu:2021-03194 https://cve.radiocsirt.org/vuln/cnvd-2019-09600 cnvd-2019-09600 2026-10-28T12:47:18.986996+00:00 cnvd-2019-09600 https://cve.radiocsirt.org/vuln/euvd-2026-69936 EUVD-2026-69936 2026-10-28T12:47:18.987011+00:00 EUVD-2026-69936 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19784 fkie_cve-2018-19784 2026-10-28T12:47:18.987023+00:00

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

 https://cve.radiocsirt.org/vuln/ghsa-4wgf-9x5r-p938 GHSA-4wgf-9x5r-p938 — Weak Cryptography in PHP-Proxy 2026-10-28T12:47:18.987048+00:00

Affected: Packagist: athlon1600/php-proxy

The [str_rot_pass](https://github.com/Athlon1600/php-proxy/blob/9cc42804ddafa079b86b947e4dd83852edddffca/src/helpers.php#L66) function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

 https://cve.radiocsirt.org/vuln/gsd-2018-19784 gsd-2018-19784 2026-10-28T12:47:18.987077+00:00 gsd-2018-19784