Latchset vulnerabilities

Products

• Jwcrypto 4
• Kdcproxy 2

Newest

• latchset jwcrypto JWCrypto: JWE ZIP decompression bomb CVE-2026-39373 Fix available 5.3 MediumApril 7, 2026
• latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 more Python-kdcproxy: remote dos via unbounded tcp upstream buffering CVE-2025-59089 Fix available 5.9 MediumNovember 12, 2025
• latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 more Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv CVE-2025-59088 Fix available 8.6 HighNovember 12, 2025
• latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Luksmeta: data corruption when handling luks1 partitions with luksmeta CVE-2025-11568 Fix available 4.4 MediumOctober 15, 2025
• latchset jose, fedoraproject fedora +1 more latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)... CVE-2023-50967 Fix available 7.5 HighMarch 20, 2024
• latchset jwcrypto, debian linux +1 more JWCrypto vulnerable to JWT bomb Attack in `deserialize` function CVE-2024-28102 Fix available 6.8 MediumMarch 6, 2024
• latchset pkcs11-provider, fedora +1 more Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths CVE-2023-6258 Fix available 8.1 HighJanuary 30, 2024
• latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 more Jwcrypto: denail of service via specifically crafted jwe CVE-2023-6681 Fix available 5.3 MediumDecember 28, 2023
• latchset jwcrypto jwcrypto lacks the Random Filling protection mechanism CVE-2016-6298 Fix available 5.3 MediumSeptember 1, 2016