Zetlyn
GitHubGet started

product of jahlives

openssl encrypt

2 thingsrelated by NVD
Severity
critical 1 medium 1

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true. Attackers…
CVE-2026-74881
Severity critical
openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out…
CVE-2026-74871
Severity medium