https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T02:44:40.099709+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-81691 fkie_cve-2026-81691 2026-10-05T02:44:40.192113+00:00

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.

 https://vulnerability.circl.lu/vuln/ghsa-cw5r-mrc2-mrh5 GHSA-cw5r-mrc2-mrh5 2026-10-05T02:44:40.192211+00:00

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.

 https://vulnerability.circl.lu/vuln/pysec-2026-3797 PYSEC-2026-3797 2026-10-05T02:44:40.192242+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.