https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:55:38.081107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380462 EUVD-2026-380462 2026-10-03T11:55:38.146343+00:00 EUVD-2026-380462 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81680 fkie_cve-2026-81680 2026-10-03T11:55:38.146385+00:00

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added.

 https://cve.radiocsirt.org/vuln/ghsa-59ww-7vhf-hj2q GHSA-59ww-7vhf-hj2q 2026-10-03T11:55:38.146421+00:00

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added.

 https://cve.radiocsirt.org/vuln/pysec-2026-3957 PYSEC-2026-3957 2026-10-03T11:55:38.146438+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added.