https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:12:51.819528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380466 EUVD-2026-380466 2026-10-03T20:12:51.824704+00:00 EUVD-2026-380466 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81684 fkie_cve-2026-81684 2026-10-03T20:12:51.824741+00:00

In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9.

 https://cve.radiocsirt.org/vuln/ghsa-82vg-rggx-556v GHSA-82vg-rggx-556v 2026-10-03T20:12:51.824774+00:00

In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9.

 https://cve.radiocsirt.org/vuln/pysec-2026-3958 PYSEC-2026-3958 2026-10-03T20:12:51.824793+00:00

Affected: PyPI: openssl-encrypt

In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9.