Weak cryptography or TLS.

Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id

• TOKUHIROM Amon2::Plugin::Web::CSRFDefender
• Weak cryptography or TLS
• CWE-340

lightrag-hku: JWT Algorithm Confusion Vulnerability

• Weak cryptography or TLS

<1.4.14 · fixed in 1.4.14

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

• Information disclosure
• Weak cryptography or TLS

<1.83.0 · fixed in 1.83.0

Botan has a certificate authentication bypass due to trust anchor confusion

• randombit botan
• Weak cryptography or TLS

Semtech LR11xx Secure Boot Bypass

• Semtech LR1110
• Semtech LR1120
• Weak cryptography or TLS

OrangeHRM Uses AES-ECB for Sensitive Data Encryption Enables Pattern Disclosure

• orangehrm
• Weak cryptography or TLS

OpenClaw: Android accepted cleartext remote gateway endpoints and sent stored credentials over ws://

• Information disclosure
• Weak cryptography or TLS

<2026.4.2 · fixed in 2026.4.2

OpenClaw: Forged Nostr DMs could create pairing state before signature verification

• Weak cryptography or TLS

>=2026.3.22, <2026.3.31 · fixed in 2026.3.31

Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation

• Weak cryptography or TLS

<1.2.1 · fixed in 1.2.1

OCSP designated-responder authorization bypass via missing signature verification

• Erlang OTP
• Weak cryptography or TLS

Bulwark Webmail S/MIME signature verification accepted self-signed certificates

• bulwarkmail webmail
• Weak cryptography or TLS

Meesho Online Shopping App com.meesho.supply endpoint risky encryption

• Meesho Online Shopping App
• Weak cryptography or TLS
• CWE-310

OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter

• Weak cryptography or TLS
• CWE-345

<2026.4.2 · fixed in 2026.4.2

Duplicate Advisory: OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter

• Weak cryptography or TLS

<2026.4.2 · fixed in 2026.4.2

Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver

• Amazon Athena ODBC driver
• Weak cryptography or TLS

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Antrea has Missing Encryption of Sensitive Data

• Weak cryptography or TLS

<1.11.0-alpha.0.0.20260225185322-738bad662b20 || >=1.11.0 || >=2.5.0 · fixed in 1.11.0-alpha.0.0.20260225185322-738bad662b20

fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key

• Weak cryptography or TLS
• CWE-20

<6.2.0 · fixed in 6.2.0

OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification

• oneuptime
• Weak cryptography or TLS

Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary Users

• panel
• Authentication bypass
• Weak cryptography or TLS

S/MIME Signature Additional Certificate

• SEPPmail Secure Email Gateway
• Weak cryptography or TLS

Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster

• Authentication bypass
• Weak cryptography or TLS

<=0.0.0-20260401092550-1c1ac1922b57 · no fixed version yet

Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials

• Weak cryptography or TLS

<0.9.0 · fixed in 0.9.0

StableLib Ed25519 Signature Malleability via Missing S < L Check

• Weak cryptography or TLS

<=2.0.2 · no fixed version yet

openssl-encrypt's unverified key bundle from_dict() + to_identity() path allows encryption to attacker keys

• Weak cryptography or TLS

<1.4.0 · fixed in 1.4.0

Multiple vulnerabilities have been addressed in IBM Aspera Shares

• IBM Aspera Shares
• Weak cryptography or TLS

Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability

• Cisco Nexus Dashboard
• Weak cryptography or TLS

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.

• Weak cryptography or TLS

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0.

• Weak cryptography or TLS

Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.

• Weak cryptography or TLS

openssl-encrypt has non-cryptographic PRNG used for steganography pixel selection

• Weak cryptography or TLS

<1.4.0 · fixed in 1.4.0

Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding)

• Weak cryptography or TLS

<4.0.0-20260205113604-ec9fdd33bc54 · fixed in 4.0.0-20260205113604-ec9fdd33bc54

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

• JJNAPIORK PAGI::Middleware::Session::Store::Cookie
• Weak cryptography or TLS
• CWE-1204

jose vulnerable to untrusted JWK header key acceptance during signature verification

• appsup-dart jose
• Weak cryptography or TLS

RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB

• rauc
• Weak cryptography or TLS
• CWE-196

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key

• MOCK Business::OnlinePayment::StoredTransaction
• Weak cryptography or TLS
• CWE-693

Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices

• Papercut NG/MF
• Weak cryptography or TLS

Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange

• Weak cryptography or TLS

>=1.10.0, <1.12.0 · fixed in 1.12.0

Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass

• randombit botan
• Weak cryptography or TLS

Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)

• randombit botan
• Weak cryptography or TLS

OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow

• OpenOLAT
• Authentication bypass
• Weak cryptography or TLS

Zebra has a Consensus Failure due to Improper Verification of V5 Transactions

• Weak cryptography or TLS

<5.0.1 · fixed in 5.0.1

Weak hash in node

• node
• Weak cryptography or TLS

nginx-ui Backup Restore Allows Tampering with Encrypted Backups

• Information disclosure
• Weak cryptography or TLS

<1.9.10-0.20260315015203-f61bcec547c0 · fixed in 1.9.10-0.20260315015203-f61bcec547c0

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Duplicate Advisory: OpenClaw: Feishu webhook mode accepted forged events when only `verificationToken` was configured

• Weak cryptography or TLS

<2026.3.12 · fixed in 2026.3.12

HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids

• KTAT HTTP::Session
• Weak cryptography or TLS
• CWE-340

Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

• TOKUHIROM Amon2
• Weak cryptography or TLS
• CWE-340

UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM

• Ubiquiti UniFi Network Controller
• Weak cryptography or TLS

Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control

• Ubiquiti UniFi Network Controller
• Ubiquiti UniFi UAP Firmware
• Weak cryptography or TLS

cryptography has incomplete DNS name constraint enforcement on peer names

• Weak cryptography or TLS

<46.0.6 · fixed in 46.0.6

Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

• Wazuh Provisioning Scripts (Agent Build Environment)
• Weak cryptography or TLS
• CWE-829

Incus does not verify combined fingerprint when downloading images from simplestreams servers

• Weak cryptography or TLS
• CWE-354

<6.23.0 · fixed in 6.23.0

Grafana Tempo has Inadequate Encryption Strength

• Weak cryptography or TLS

<2.10.3 · fixed in 2.10.3

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

• Weak cryptography or TLS

<1.4.0 · fixed in 1.4.0

Forge has signature forgery in Ed25519 due to missing S > L check

• Weak cryptography or TLS

<1.4.0 · fixed in 1.4.0

libcrux has an Incorrect Check of Signer Response Norm During Verification

• Weak cryptography or TLS

<0.0.8 · fixed in 0.0.8

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

• IBM InfoSphere Information Server
• Weak cryptography or TLS

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Cisco IOS XE Software

• Cisco IOS XE Software
• Weak cryptography or TLS