https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:24:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-228728 EUVD-2026-228728 https://cve.radiocsirt.org/vuln/euvd-2026-228728 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48195 <p>An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication.</p> <p>An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-48195 https://cve.radiocsirt.org/vuln/ghsa-gvfj-fxx3-j323 <p><strong>Affected:</strong> Go: mellium.im/sasl</p> <p>An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication.</p> <p><strong>Affected:</strong> Go: mellium.im/sasl</p> <p>An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-gvfj-fxx3-j323 https://cve.radiocsirt.org/vuln/gsd-2022-48195 gsd-2022-48195 https://cve.radiocsirt.org/vuln/gsd-2022-48195