https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:09:22.408765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380473 EUVD-2026-380473 2026-10-03T09:09:22.475492+00:00 EUVD-2026-380473 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81691 fkie_cve-2026-81691 2026-10-03T09:09:22.475526+00:00

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-cw5r-mrc2-mrh5 GHSA-cw5r-mrc2-mrh5 2026-10-03T09:09:22.475560+00:00

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.

 https://cve.radiocsirt.org/vuln/pysec-2026-3797 PYSEC-2026-3797 2026-10-03T09:09:22.475578+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.