<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 14:17:40 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-9287 — Missing type checks leading to hash rewind and passing on crafted data</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-9287</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; cipher-base&lt;/p&gt;
&lt;p&gt;Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; cipher-base&lt;/p&gt;
&lt;p&gt;Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-9287</guid>
    </item>
    <item>
      <title>USN-7746-1 — node-cipher-base vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-7746-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: node-cipher-base, Ubuntu:Pro:20.04:LTS: node-cipher-base, Ubuntu:22.04:LTS: node-cipher-base, Ubuntu:24.04:LTS: node-cipher-base&lt;/p&gt;
&lt;p&gt;Nikita Skovoroda discovered that cipher-base did not properly manage
certain inputs. An attacker could possibly use this issue to manipulate
the internal state of hash functions, resulting in hash collisions,
denial of service, or other unspecified impact.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: node-cipher-base, Ubuntu:Pro:20.04:LTS: node-cipher-base, Ubuntu:22.04:LTS: node-cipher-base, Ubuntu:24.04:LTS: node-cipher-base&lt;/p&gt;
&lt;p&gt;Nikita Skovoroda discovered that cipher-base did not properly manage
certain inputs. An attacker could possibly use this issue to manipulate
the internal state of hash functions, resulting in hash collisions,
denial of service, or other unspecified impact.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-7746-1</guid>
    </item>
  </channel>
</rss>
