https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:53:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-239188 EUVD-2026-239188 https://cve.radiocsirt.org/vuln/euvd-2026-239188 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4658 <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4658 https://cve.radiocsirt.org/vuln/ghsa-56wx-66px-9j66 <p><strong>Affected:</strong> Go: github.com/openpubkey/opkssh</p> <p>### Impact</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> <p>### Patches</p> <p>The vulnerability does not exist in more recent versions of OPKSSH. his only impacts OPKSSH when used to verify ssh keys on a server, the OPKSSH client is unaffected. To remediate upgrade to a version of OPKSSH v0.5.0 or greater.</p> <p>To determine if you are vulnerable run on your server:</p> <p>```bash opkssh --version ```</p> <p>If the version is less than 0.5.0 you should upgrade. To upgrade to the latest version run:</p> <p>```bash wget -qO- &#34;https://raw.githubusercontent.com/openpubkey/opkssh/main/scripts/install-linux.sh&#34; | sudo bash ```</p> <p>### References</p> <p>[CVE-2025-4658](https://www.cve.org/CVERecord?id=CVE-2025-4658)</p> <p>The upstream vulnerability in OpenPubkey is [CVE-2025-3757](https://www.cve.org/CVERecord?id=CVE-2025-3757) and has the security advisory https://github.com/openpubkey/openpubkey/security/advisories/GHSA-537f-gxgm-3jjq</p> <p><strong>Affected:</strong> Go: github.com/openpubkey/opkssh</p> <p>### Impact</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> <p>### Patches</p> <p>The vulnerability does not exist in more recent versions of OPKSSH. his only impacts OPKSSH when used to verify ssh keys on a server, the OPKSSH client is unaffected. To remediate upgrade to a version of OPKSSH v0.5.0 or greater.</p> <p>To determine if you are vulnerable run on your server:</p> <p>```bash opkssh --version ```</p> <p>If the version is less than 0.5.0 you should upgrade. To upgrade to the latest version run:</p> <p>```bash wget -qO- &#34;https://raw.githubusercontent.com/openpubkey/opkssh/main/scripts/install-linux.sh&#34; | sudo bash ```</p> <p>### References</p> <p>[CVE-2025-4658](https://www.cve.org/CVERecord?id=CVE-2025-4658)</p> <p>The upstream vulnerability in OpenPubkey is [CVE-2025-3757](https://www.cve.org/CVERecord?id=CVE-2025-3757) and has the security advisory https://github.com/openpubkey/openpubkey/security/advisories/GHSA-537f-gxgm-3jjq</p> https://cve.radiocsirt.org/vuln/ghsa-56wx-66px-9j66 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15135-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4658 <p><strong>Affected:</strong> Ubuntu:25.10: opkssh, Ubuntu:Pro:26.04:LTS: opkssh</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> <p><strong>Affected:</strong> Ubuntu:25.10: opkssh, Ubuntu:Pro:26.04:LTS: opkssh</p> <p>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4658