https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:27:55 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 https://cve.radiocsirt.org/vuln/euvd-2026-270790 EUVD-2026-270790 https://cve.radiocsirt.org/vuln/euvd-2026-270790 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8556 <p>A flaw was found in CIRCL&#39;s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.</p> <p>A flaw was found in CIRCL&#39;s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8556 https://cve.radiocsirt.org/vuln/ghsa-2x5j-vhc8-9cwm <p><strong>Affected:</strong> Go: github.com/cloudflare/circl</p> <p>### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.</p> <p>Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.</p> <p>### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.</p> <p>We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.</p> <p><strong>Affected:</strong> Go: github.com/cloudflare/circl</p> <p>### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.</p> <p>Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.</p> <p>### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.</p> <p>We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.</p> https://cve.radiocsirt.org/vuln/ghsa-2x5j-vhc8-9cwm https://cve.radiocsirt.org/vuln/opensuse-su-2026:10013-1 <p>apptainer-1.4.5-1.1 on GA media</p> <p>apptainer-1.4.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10013-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0439-1 <p>Security update for apptainer</p> <p>Security update for apptainer</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0439-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8556 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-github-cloudflare-circl, Ubuntu:24.04:LTS: golang-github-cloudflare-circl</p> <p>A flaw was found in CIRCL&#39;s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-github-cloudflare-circl, Ubuntu:24.04:LTS: golang-github-cloudflare-circl</p> <p>A flaw was found in CIRCL&#39;s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8556