https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:19:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45992 EUVD-2026-45992 https://cve.radiocsirt.org/vuln/euvd-2026-45992 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26234 <p>Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast&#39;s HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks. This problem is fixed in Opencast 7.9 and Opencast 8.8 Please be aware that fixing the problem means that Opencast will not simply accept any self-signed certificates any longer without properly importing them. If you need those, please make sure to import them into the Java key store. Better yet, get a valid certificate.</p> <p>Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast&#39;s HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks. This problem is fixed in Opencast 7.9 and Opencast 8.8 Please be aware that fixing the problem means that Opencast will not simply accept any self-signed certificates any longer without properly importing them. If you need those, please make sure to import them into the Java key store. Better yet, get a valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26234 https://cve.radiocsirt.org/vuln/ghsa-44cw-p2hm-gpf6 <p><strong>Affected:</strong> Maven: org.opencastproject:opencast-kernel</p> <p>Opencast before version 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast&#39;s HTTP requests.</p> <p>Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks.</p> <p>### Patches</p> <p>This problem is fixed in Opencast 7.9 and Opencast 8.9</p> <p>### Self-Signed Certificates</p> <p>Please be aware that fixing the problem means that Opencast will not simply accept any self-signed certificates any longer without properly importing them. If you need those, please make sure to import them into the Java key store. Better yet, get a valid certificate e.g. from [Let&#39;s Encrypt](https://letsencrypt.org).</p> <p><strong>Affected:</strong> Maven: org.opencastproject:opencast-kernel</p> <p>Opencast before version 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast&#39;s HTTP requests.</p> <p>Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks.</p> <p>### Patches</p> <p>This problem is fixed in Opencast 7.9 and Opencast 8.9</p> <p>### Self-Signed Certificates</p> <p>Please be aware that fixing the problem means that Opencast will not simply accept any self-signed certificates any longer without properly importing them. If you need those, please make sure to import them into the Java key store. Better yet, get a valid certificate e.g. from [Let&#39;s Encrypt](https://letsencrypt.org).</p> https://cve.radiocsirt.org/vuln/ghsa-44cw-p2hm-gpf6 https://cve.radiocsirt.org/vuln/gsd-2020-26234 gsd-2020-26234 https://cve.radiocsirt.org/vuln/gsd-2020-26234