https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:47:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-12616 <p><strong>Affected:</strong> Eclipse Foundation Eclipse CSI - PIA</p> <p>The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements before any validation gate. Because the configured log format (&#34;%(asctime)s - %(name)s - %(levelname)s - %(message)s&#34;) renders newlines literally, an unauthenticated attacker can forge log records that are byte-for-byte indistinguishable from PIA&#39;s genuine &#34;Successfully authenticated project&#34; message. PIA is an authentication broker whose logs are explicitly relied upon for incident response (DESIGN.md §5.4 lists &#34;Token verifications&#34; and &#34;Errors&#34; as events to log), so the ability to plant fake auth-success entries directly undermines the audit trail the service exists to produce.</p> <p><strong>Affected:</strong> Eclipse Foundation Eclipse CSI - PIA</p> <p>The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements before any validation gate. Because the configured log format (&#34;%(asctime)s - %(name)s - %(levelname)s - %(message)s&#34;) renders newlines literally, an unauthenticated attacker can forge log records that are byte-for-byte indistinguishable from PIA&#39;s genuine &#34;Successfully authenticated project&#34; message. PIA is an authentication broker whose logs are explicitly relied upon for incident response (DESIGN.md §5.4 lists &#34;Token verifications&#34; and &#34;Errors&#34; as events to log), so the ability to plant fake auth-success entries directly undermines the audit trail the service exists to produce.</p> https://cve.radiocsirt.org/vuln/cve-2026-12616