https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:09:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380487 EUVD-2026-380487 https://cve.radiocsirt.org/vuln/euvd-2026-380487 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81705 <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-81705 https://cve.radiocsirt.org/vuln/ghsa-qvh5-87jf-4g7p <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> https://cve.radiocsirt.org/vuln/ghsa-qvh5-87jf-4g7p https://cve.radiocsirt.org/vuln/pysec-2026-3780 <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2&gt;&amp;1 output, CI job logs, or the GUI&#39;s persistent debug log) can recover the password.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3780