https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:42:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380496 EUVD-2026-380496 https://cve.radiocsirt.org/vuln/euvd-2026-380496 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81720 <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-81720 https://cve.radiocsirt.org/vuln/ghsa-92rj-569v-9vqg <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-92rj-569v-9vqg https://cve.radiocsirt.org/vuln/pysec-2026-3965 <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> <p><strong>Affected:</strong> PyPI: openssl-encrypt</p> <p>openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3965