rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
osv · RUSTSEC-2026-0349
crates.io: rustls · crates.io: rustls
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · RUSTSEC-2026-0349
crates.io: rustls · crates.io: rustls
osv · RUSTSEC-2026-0348
crates.io: rustls · crates.io: rustls
osv · RUSTSEC-2026-0347
crates.io: rustls · crates.io: rustls
osv · CVE-2026-110816
npm: qs
cve-program ·
Vendor product: pkg
cve-program ·
Vendor product: libXi
cve-program ·
Vendor product: Fusion
cve-program ·
Vendor product: Fusion
cve-program ·
Vendor product: Fusion
cve-program ·
Vendor product: node-tesseract
cve-program ·
Vendor product: Linux · Vendor product: Linux
cve-program ·
Vendor product: Linux · Vendor product: Linux
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
https://repo.hex.pm: tidewave · https://github.com: tidewave-ai/tidewave_phoenix
osv · CVE-2026-110864
npm: better-auth
osv · CVE-2026-116591
Go: github.com/klauspost/compress/zstd
osv · CVE-2026-110862 · CVE-2026-114607
npm: better-auth
osv · CVE-2026-110861
npm: @better-auth/drizzle-adapter · npm: @better-auth/kysely-adapter · npm: better-auth
cve-program ·
Vendor product: Dexbotic
osv · RUSTSEC-2026-0285
crates.io: rustls
osv · CVE-2026-111917 · GO-2026-6715
Go: code.vikunja.io/api
osv · CVE-2026-114665 · CVE-2026-53553 · GO-2026-5938
Go: github.com/zhenorzz/goploy
osv · CVE-2026-111921 · GO-2026-6730
Go: code.vikunja.io/api
osv · CVE-2026-76216 · GO-2026-6711
Go: code.vikunja.io/api
osv · CVE-2026-53552 · GO-2026-5936
Go: github.com/zhenorzz/goploy
osv · CVE-2026-111918 · GO-2026-6731
Go: code.vikunja.io/api
cve-program ·
Vendor product: 3Dviewer-Nextcloud
cve-program ·
Vendor product: Full Client · Vendor product: Portable · Vendor product: Remote Control
cve-program ·
Vendor product: TeamViewer Remote - Patch Management
cve-program ·
Vendor product: Full Client · Vendor product: Host
osv · CVE-2026-110872
npm: nodemailer
osv · CVE-2026-44645
npm: liquidjs
osv · CVE-2026-44644
npm: liquidjs
osv · CVE-2026-44646
npm: liquidjs
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.