https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:26:04.889940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-239189 EUVD-2026-239189 2026-10-02T15:26:04.893108+00:00 EUVD-2026-239189 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3757 fkie_cve-2025-3757 2026-10-02T15:26:04.893141+00:00

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.

 https://cve.radiocsirt.org/vuln/ghsa-537f-gxgm-3jjq GHSA-537f-gxgm-3jjq — OpenPubkey Vulnerable to Authentication Bypass 2026-10-02T15:26:04.893171+00:00

Affected: Go: github.com/openpubkey/openpubkey

### Impact

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.

### Patches

Upgrade to v0.10.0 or greater. This vulnerability is not present in versions of OpenPubkey after v0.9.0.

### References

[CVE-2025-3757 ](https://www.cve.org/CVERecord?id=CVE-2025-3757)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 openSUSE-SU-2025:15135-1 — govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media 2026-10-02T15:26:04.893199+00:00

govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3757 UBUNTU-CVE-2025-3757 2026-10-02T15:26:04.893220+00:00

Affected: Ubuntu:25.10: golang-github-openpubkey-openpubkey, Ubuntu:26.04:LTS: golang-github-openpubkey-openpubkey

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.