https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:11:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-81683 <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI&#39;s Settings screen &#39;combined certificate and private key&#39; PEM field. A local attacker with file system access can read the exposed private key. Version 1.4.9 writes the PEM to a dedicated 0600 file, keeps only its path in SharedPreferences, and migrates/scrubs existing cleartext values.</p> <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI&#39;s Settings screen &#39;combined certificate and private key&#39; PEM field. A local attacker with file system access can read the exposed private key. Version 1.4.9 writes the PEM to a dedicated 0600 file, keeps only its path in SharedPreferences, and migrates/scrubs existing cleartext values.</p> https://vulnerability.circl.lu/vuln/cve-2026-81683