Threats Tagged 'ghsa-q9f6-q6m5-f5h2'
View all threats tagged with 'ghsa-q9f6-q6m5-f5h2'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-q9f6-q6m5-f5h2'
Click on any threat for detailed analysis and mitigation recommendations
0 A high-severity information exposure vulnerability exists in jahlives openssl_encrypt versions up to 1.4.7. Diagnostic commands 'hsm fido2-test' and 'hsm onlykey-test' print the full derived hardware pepper as hex to stdout/stderr, which can be captured in terminal scrollback, session recordings, or CI logs. The leaked pepper is derived from a random per-invocation test salt and cannot be used to decrypt real files. The issue was fixed in versions 1.4.8 and 1.5.0 by removing these hex dumps and routing debug output through a redaction layer. Join the discussion | CVE Database V5 | 08/17/2026, 11:04:40 UTC Added: 08/17/2026, 11:26:57 UTC |
Showing 1 to 1 of 1 result