VYPR

Openpubkey

by Openpubkey

CVEs (2)

  • CVE-2025-4658CriMay 13, 2025
    risk 0.64cvss 9.8epss 0.00

    Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions…

  • CVE-2025-3757CriMay 13, 2025
    risk 0.64cvss 9.8epss 0.00

    Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.