https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357260 EUVD-2026-357260 https://cve.radiocsirt.org/vuln/euvd-2026-357260 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3338 <p>Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.</p> <p>Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.</p> <p>Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.</p> <p>Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3338 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3338 msrc_CVE-2026-3338 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3338 https://cve.radiocsirt.org/vuln/rhsa-2026:5459 <p>urllib3: urllib3 Streaming API improperly handles highly compressed data aws-lc: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects aws-lc: AWS-LC: Signature bypass due to improper validation in PKCS7_verify() urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet</p> <p>urllib3: urllib3 Streaming API improperly handles highly compressed data aws-lc: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects aws-lc: AWS-LC: Signature bypass due to improper validation in PKCS7_verify() urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5459 https://cve.radiocsirt.org/vuln/rustsec-2026-0047 <p><strong>Affected:</strong> crates.io: aws-lc-sys</p> <p>Improper signature validation in `PKCS7_verify()` in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.</p> <p>Customers of AWS services do not need to take action. `aws-lc-sys` contains code from AWS-LC. Applications using `aws-lc-sys` should upgrade to the most recent release of `aws-lc-sys`.</p> <p>There is no workaround; applications using `aws-lc-sys` should upgrade to the most recent release of `aws-lc-sys`.</p> <p><strong>Affected:</strong> crates.io: aws-lc-sys</p> <p>Improper signature validation in `PKCS7_verify()` in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.</p> <p>Customers of AWS services do not need to take action. `aws-lc-sys` contains code from AWS-LC. Applications using `aws-lc-sys` should upgrade to the most recent release of `aws-lc-sys`.</p> <p>There is no workaround; applications using `aws-lc-sys` should upgrade to the most recent release of `aws-lc-sys`.</p> https://cve.radiocsirt.org/vuln/rustsec-2026-0047