https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:25:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-239189 EUVD-2026-239189 https://cve.radiocsirt.org/vuln/euvd-2026-239189 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3757 <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3757 https://cve.radiocsirt.org/vuln/ghsa-537f-gxgm-3jjq <p><strong>Affected:</strong> Go: github.com/openpubkey/openpubkey</p> <p>### Impact</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> <p>### Patches</p> <p>Upgrade to v0.10.0 or greater. This vulnerability is not present in versions of OpenPubkey after v0.9.0.</p> <p>### References</p> <p>[CVE-2025-3757 ](https://www.cve.org/CVERecord?id=CVE-2025-3757)</p> <p><strong>Affected:</strong> Go: github.com/openpubkey/openpubkey</p> <p>### Impact</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> <p>### Patches</p> <p>Upgrade to v0.10.0 or greater. This vulnerability is not present in versions of OpenPubkey after v0.9.0.</p> <p>### References</p> <p>[CVE-2025-3757 ](https://www.cve.org/CVERecord?id=CVE-2025-3757)</p> https://cve.radiocsirt.org/vuln/ghsa-537f-gxgm-3jjq https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3757 <p><strong>Affected:</strong> Ubuntu:25.10: golang-github-openpubkey-openpubkey, Ubuntu:26.04:LTS: golang-github-openpubkey-openpubkey</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> <p><strong>Affected:</strong> Ubuntu:25.10: golang-github-openpubkey-openpubkey, Ubuntu:26.04:LTS: golang-github-openpubkey-openpubkey</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3757