https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:39:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-12502 EUVD-2026-12502 https://cve.radiocsirt.org/vuln/euvd-2026-12502 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2818 <p>Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.</p> <p>Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2818 https://cve.radiocsirt.org/vuln/ghsa-8wj3-cpmr-8whp <p><strong>Affected:</strong> Packagist: cockpit-hq/cockpit</p> <p>Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an attacker to bypass the 2FA code. A patch is available on the `develop` branch and is expected to be part of version 2.2.2.</p> <p><strong>Affected:</strong> Packagist: cockpit-hq/cockpit</p> <p>Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an attacker to bypass the 2FA code. A patch is available on the `develop` branch and is expected to be part of version 2.2.2.</p> https://cve.radiocsirt.org/vuln/ghsa-8wj3-cpmr-8whp https://cve.radiocsirt.org/vuln/gsd-2022-2818 gsd-2022-2818 https://cve.radiocsirt.org/vuln/gsd-2022-2818