{"uuid": "e7b4738d-6166-4af3-9e64-04ecbe301254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mudm346vub2o", "content": "New HIGH CVE for OpenSSL: CVE-2026-81690\n\nopenssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob(), which in CPython does not desce\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81690", "creation_timestamp": "2026-08-31T00:01:48.795567Z"}