BIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses

Excluded iPAddress name constraints with an all-zero mask are not applied

pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Stubbed cryptography without warnings

Low-level GCM ignores the operation nonce

Streaming AEAD does not authenticate stream structure

Ed25519 identity public keys permit universal signature forgery

Processing of unverified relay events

Wallet event parsers accept unauthenticated events

Verification cache poisoning allows forged Nostr events to bypass signature validation

AES-GCM did not enforce limits on AAD length

Non-constant time Authentication Tag Check in AES-GCM Decryption

Triton VM Soundness Vulnerability due to Missing Constraint

TLS hostname verification disabled when using Boring TLS backend

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

CRL Distribution Point Scope Check Logic Error in AWS-LC

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

PKCS7_verify Signature Validation Bypass in AWS-LC

CRL Distribution Point Scope Check Logic Error in AWS-LC

Unsoundness in opt-in ARMv8 assembly backend for keccak

Timing side-channel in ML-DSA decomposition

Triton VM Soundness Vulnerability due to Improper Sampling of Randomness

Non-constant-time code generation on ARM32 targets

Plaintext exposed in decrypt_in_place_detached even on tag verification failure

Incorrect calculation on aarch64

Missing check in ZK proof in CGGMP21 Threshold Signing Protocol

CGGMP21 presignatures can be used in the way that significantly reduces security

Missing check in ZK proof in CGGMP21 Threshold Signing Protocol

CGGMP21 presignatures can be used in the way that significantly reduces security

SHA-1 collision attacks are not detected

Hickory DNS failure to verify self-signed RRSIG for DNSKEYs

Missing facility to signal rotation of a verified cryptographic identity

Use of insecure cryptographic algorithms

Bias of Polynomial Coefficients in Secret Sharing

Ambiguous challenge derivation

Ambiguous challenge derivation

Ambiguous challenge derivation

olm-sys: wrapped library unmaintained, potentially vulnerable

UserIdentity::is_verified not checking verification status of own user identity while performing the check

Usage of non-constant time base64 decoder could lead to leakage of secret key material

Timing variability in curve25519-dalek's Scalar29::sub/Scalar52::sub

Reduced entropy due to inadequate character set usage

KyberSlash: division timings depending on secrets

Unauthenticated Nonce Increment in snow

Improper comparison of different-length signatures

Marvin Attack: potential key recovery through timing sidechannels

Sequential calls of encryption API (encrypt, wrap, and dump) result in nonce reuse

Double Public Key Signing Function Oracle Attack on ed25519-dalek

TLS certificate common name validation bypass

TLS certificate common name validation bypass

Timing Oracle in RSA Decryption

aliyun-oss-client secret exposure

evm incorrect state transition

git2 does not verify SSH keys by default

Using a Custom Cipher with NID_undef may lead to NULL encryption

Post-Quantum Signature scheme Rainbow level I parametersets broken

Post-Quantum Key Encapsulation Mechanism SIKE broken

Safety issues in pkcs11

AES OCB fails to encrypt some bytes

Heap memory corruption with RSA private key operation

OCSP_basic_verify may incorrectly verify the response signing certificate

Incorrect MAC key used in the RC4-MD5 ciphersuite

Timing attack

Miscomputation when performing AES encryption in rust-crypto

Failure to verify the public key of a SignedEnvelope against the PeerId in a PeerRecord

Threshold value is ignored (all shares are n=3)

Observable Discrepancy in libsecp256k1-rs

Miscomputed results when using AVX2 backend

SM2 Decryption Buffer Overflow

Read buffer overruns processing ASN.1 strings

libsecp256k1 allows overflowing signatures

Flaw in FieldVar::mul_by_inverse allows unsound R1CS constraint systems

CA certificate check bypass with X509_V_FLAG_X509_STRICT

Incorrect check on buffer length when seeding RNGs

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

HMAC-BLAKE2 algorithms compute incorrect results

Incorrect implementation of the Streebog hash functions

HTTPS MitM vulnerability due to lack of hostname verification

Flaw in CBOR deserializer allows stack overflow

ChaCha20 counter overflow can expose repetitions in the keystream

Flaw in Scalar::check_overflow allows side-channel timing attack