LA
Vendor
latchset
9
CVEs
0
On KEV
0
New 30D
Products
JW6.8
jwcrypto
latchset
4 CVEs0 on KEV0 new
KD8.6
kdcproxy
latchset
2 CVEs0 on KEV0 new
JO7.5
Jose
Latchset
1 CVEs0 on KEV0 new
LU4.4
luksmeta
Latchset
1 CVEs0 on KEV0 new
PK8.1
Pkcs11-provider
Latchset
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39373 | JW jwcrypto latchset | 5.3 | Apr 7 | JWCrypto: JWE ZIP decompression bomb |
| CVE-2025-59089 | KD kdcproxy latchset | 5.9 | Nov 12 | Python-kdcproxy: remote dos via unbounded tcp upstream buffering |
| CVE-2025-59088 | KD kdcproxy latchset | 8.6 | Nov 12 | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv |
| CVE-2025-11568 | LU luksmeta Latchset | 4.4 | Oct 15 | Luksmeta: data corruption when handling luks1 partitions with luksmeta |
| CVE-2023-50967 | JO Jose Latchset | 7.5 | Mar 20 | latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value |
| CVE-2024-28102 | JW jwcrypto latchset | 6.8 | Mar 6 | JWCrypto vulnerable to JWT bomb Attack in `deserialize` function |
| CVE-2023-6681 | JW Jwcrypto Latchset | 5.3 | Feb 12 | Jwcrypto: denail of service via specifically crafted jwe |
| CVE-2023-6258 | PK Pkcs11-provider Latchset | 8.1 | Jan 30 | Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths |
| CVE-2016-6298 | JW Jwcrypto Latchset | 5.3 | Sep 1 | The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote… |