https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T05:38:54.139199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5689 EUVD-2026-5689 2026-10-12T05:38:54.216016+00:00 EUVD-2026-5689 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36277 fkie_cve-2024-36277 2026-10-12T05:38:54.216046+00:00

Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.

 https://cve.radiocsirt.org/vuln/ghsa-xmvf-wm3q-gh2f GHSA-xmvf-wm3q-gh2f 2026-10-12T05:38:54.216078+00:00

Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000060 jvndb-2024-000060 2026-10-12T05:38:54.216095+00:00

"FreeFrom - the nostr client" App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. <ul><li>Improper verification of cryptographic signature (CWE-347) - CVE-2024-36277</li> <li>Reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CWE-649) - CVE-2024-36279</li> <li>Reusing a nonce, key pair in encryption (CWE-323) - CVE-2024-36289</li></ul> The people listed below reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Hayato Kimura of University of Hyogo Ryoma Ito of National Institute of Information and Communications Technology (NICT) Kazuhiko Minematsu of NEC Corporation/Yokohama National University Takanori Isobe of University of Hyogo