https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T02:13:33.501367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ba38324 Withdrawn: CLEANSTART-2026-BA38324 — Security fixes in ztunnel-fips 1.29.1-r0 2026-10-15T02:13:33.557759+00:00

Withdrawn by the publisher.

Affected: CleanStart: ztunnel-fips

Package ztunnel-fips version 1.29.1-r0 fixes 8 vulnerabilities: ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf, ghsa-394x-vwmw-crm3, ghsa-9f94-5g5w-gf6r...

 https://cve.radiocsirt.org/vuln/rustsec-2026-0046 RUSTSEC-2026-0046 — PKCS7_verify Certificate Chain Validation Bypass in AWS-LC 2026-10-15T02:13:33.557811+00:00

Affected: crates.io: aws-lc-sys

Improper certificate validation in `PKCS7_verify()` in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer.

Customers of AWS services do not need to take action. `aws-lc-sys` contains code from AWS-LC. Applications using `aws-lc-sys` should upgrade to the most recent release of `aws-lc-sys`.

There is no workaround; applications using `aws-lc-sys` should upgrade to the most recent release of aws-lc-sys.