https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:09:33.584206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380436 EUVD-2026-380436 2026-10-03T15:09:33.670998+00:00 EUVD-2026-380436 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74889 fkie_cve-2026-74889 2026-10-03T15:09:33.671035+00:00

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.

 https://cve.radiocsirt.org/vuln/ghsa-fxcp-mjj5-v58w GHSA-fxcp-mjj5-v58w 2026-10-03T15:09:33.671070+00:00

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.

 https://cve.radiocsirt.org/vuln/pysec-2026-3765 PYSEC-2026-3765 2026-10-03T15:09:33.671086+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.