https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T10:25:15.527019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254637 EUVD-2026-254637 2026-10-17T10:25:15.528989+00:00 EUVD-2026-254637 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61779 fkie_cve-2025-61779 2026-10-17T10:25:15.529020+00:00

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue.