https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:21:32 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-cx34477 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.27.9-r0 fixes 4 vulnerabilities: ghsa-pwjx-qhcg-rvj4, ghsa-965h-392x-2mh5, ghsa-xgp8-3hg3-c2mh, ghsa-82j2-j2ch-gfr8</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.27.9-r0 fixes 4 vulnerabilities: ghsa-pwjx-qhcg-rvj4, ghsa-965h-392x-2mh5, ghsa-xgp8-3hg3-c2mh, ghsa-82j2-j2ch-gfr8</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cx34477 https://cve.radiocsirt.org/vuln/rustsec-2026-0104 <p><strong>Affected:</strong> crates.io: rustls-webpki</p> <p>A panic was reachable when parsing certificate revocation lists via [`BorrowedCertRevocationList::from_der`] or [`OwnedCertRevocationList::from_der`]. This was the result of mishandling a syntactically valid empty `BIT STRING` appearing in the `onlySomeReasons` element of a `IssuingDistributionPoint` CRL extension.</p> <p>This panic is reachable prior to a CRL&#39;s signature being verified.</p> <p>Applications that do not use CRLs are not affected.</p> <p>Thank you to [@tynus3](https://github.com/tynus3) for the report.</p> <p><strong>Affected:</strong> crates.io: rustls-webpki</p> <p>A panic was reachable when parsing certificate revocation lists via [`BorrowedCertRevocationList::from_der`] or [`OwnedCertRevocationList::from_der`]. This was the result of mishandling a syntactically valid empty `BIT STRING` appearing in the `onlySomeReasons` element of a `IssuingDistributionPoint` CRL extension.</p> <p>This panic is reachable prior to a CRL&#39;s signature being verified.</p> <p>Applications that do not use CRLs are not affected.</p> <p>Thank you to [@tynus3](https://github.com/tynus3) for the report.</p> https://cve.radiocsirt.org/vuln/rustsec-2026-0104