Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:25:53 +0000 CVE-2026-1229 — Incorrect calculation in CIRCL secp384r1 CombinedMult https://cve.radiocsirt.org/vuln/cve-2026-1229 <p><strong>Affected:</strong> Cloudflare CIRCL</p> <p>The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected.</p> <p>The bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .</p> <p><strong>Affected:</strong> Cloudflare CIRCL</p> <p>The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected.</p> <p>The bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .</p> https://cve.radiocsirt.org/vuln/cve-2026-1229 GHSA-j5w8-q4qc-rx2x — golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption https://cve.radiocsirt.org/vuln/ghsa-j5w8-q4qc-rx2x <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.</p> https://cve.radiocsirt.org/vuln/ghsa-j5w8-q4qc-rx2x