Threats tagged 'ghsa-jw8h-gwjw-g7rc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-74901jahlives openssl_encrypt · Improper Verification of Cryptographic Signature Critical9.3EPSS 0.4%2026-08-17CVE Database V5CVE-2026-74901 openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without detection. EPSS 0.4%Vulnerability #ghsa-jw8h-gwjw-g7rc	CVE Database V5	2026-08-17

Page 1 of 1