https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:25:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0698 certfr-2026-avi-0698 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0698 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj39907 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: step</p> <p>Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: step</p> <p>Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aj39907 https://cve.radiocsirt.org/vuln/euvd-2026-267656 EUVD-2026-267656 https://cve.radiocsirt.org/vuln/euvd-2026-267656 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25793 <p>Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.</p> <p>Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25793 https://cve.radiocsirt.org/vuln/ghsa-69x3-g4r3-p962 <p><strong>Affected:</strong> Go: github.com/slackhq/nebula</p> <p>### Impact</p> <p>When using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint.</p> <p>In order for this to affect a user or network, all of the following must be true: * `CURVE_P256` certificates are being used * There are one or more entries on the blocklist * The certificates for those entries are signed by a trusted CA and not expired * An attacker has a copy of the private key, and corresponding certificate, for one of those blocklist entries</p> <p>### Patches</p> <p>See attached</p> <p>### Workarounds</p> <p>If full copies of each certificate on the existing blocklist are available, it is possible to compute their opposite-chirality signature, and then the appropriate second fingerprint to list in the blocklist.</p> <p>Rotating out all CAs that have signed hosts on the blocklist will also prevent exploitation of this vulnerability.</p> <p><strong>Affected:</strong> Go: github.com/slackhq/nebula</p> <p>### Impact</p> <p>When using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint.</p> <p>In order for this to affect a user or network, all of the following must be true: * `CURVE_P256` certificates are being used * There are one or more entries on the blocklist * The certificates for those entries are signed by a trusted CA and not expired * An attacker has a copy of the private key, and corresponding certificate, for one of those blocklist entries</p> <p>### Patches</p> <p>See attached</p> <p>### Workarounds</p> <p>If full copies of each certificate on the existing blocklist are available, it is possible to compute their opposite-chirality signature, and then the appropriate second fingerprint to list in the blocklist.</p> <p>Rotating out all CAs that have signed hosts on the blocklist will also prevent exploitation of this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-69x3-g4r3-p962