https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:52:56.552567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21142 EUVD-2026-21142 2026-10-07T02:52:56.648916+00:00 EUVD-2026-21142 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3798 fkie_cve-2021-3798 2026-10-07T02:52:56.648977+00:00

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

 https://cve.radiocsirt.org/vuln/ghsa-f2gp-jqv6-cmxg GHSA-f2gp-jqv6-cmxg 2026-10-07T02:52:56.649014+00:00

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

 https://cve.radiocsirt.org/vuln/gsd-2021-3798 gsd-2021-3798 2026-10-07T02:52:56.649033+00:00 gsd-2021-3798 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3798 msrc_CVE-2021-3798 — A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is cr… 2026-10-07T02:52:56.649045+00:00 msrc_CVE-2021-3798 https://cve.radiocsirt.org/vuln/rhba-2021:3054 RHBA-2021:3054 — Red Hat Bug Fix Advisory: opencryptoki bug fix and enhancement update 2026-10-07T02:52:56.649065+00:00

openCryptoki: Soft token does not check if an EC key is valid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3798 UBUNTU-CVE-2021-3798 2026-10-07T02:52:56.649083+00:00

Affected: Ubuntu:16.04:LTS: opencryptoki, Ubuntu:18.04:LTS: opencryptoki, Ubuntu:20.04:LTS: opencryptoki, Ubuntu:22.04:LTS: opencryptoki, Ubuntu:24.04:LTS: opencryptoki, Ubuntu:25.10: opencryptoki, Ubuntu:26.04:LTS: opencryptoki

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.