https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:06:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380418 EUVD-2026-380418 https://cve.radiocsirt.org/vuln/euvd-2026-380418 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74871 <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-74871 https://cve.radiocsirt.org/vuln/ghsa-pj8r-rv9w-cfg8 <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> https://cve.radiocsirt.org/vuln/ghsa-pj8r-rv9w-cfg8 https://cve.radiocsirt.org/vuln/pysec-2026-3976 <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3976