Jahlives vulnerabilities
66 CVEs and advisories name Jahlives as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-81685openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata
- CVE-2026-81684openssl_encrypt before 1.4.9 Information Disclosure via Command Line
- CVE-2026-81683openssl_encrypt before 1.4.9 Plaintext Private Key Storage
- CVE-2026-81682openssl_encrypt before 1.4.9 Insecure File Permissions
- CVE-2026-81681openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage
- CVE-2026-81680openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
- CVE-2026-74901openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback
- CVE-2026-74900openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode
- CVE-2026-74899openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy
- CVE-2026-74896openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal
- CVE-2026-74895openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation
- CVE-2026-74894openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token
- CVE-2026-74893openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets
- CVE-2026-74892openssl_encrypt before 1.4.0 Hardcoded Secret Key
- CVE-2026-74891openssl_encrypt before 1.4.0 Hardcoded Database Credentials
- CVE-2026-74890openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable
- CVE-2026-74889openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
- CVE-2026-74888openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation
- CVE-2026-74887openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module
- CVE-2026-74886openssl_encrypt before 1.4.0 Plugin Import Guard Bypass
- CVE-2026-74885openssl_encrypt before 1.4.0 Logging Bug and Race Condition
- CVE-2026-74884openssl_encrypt before 1.4.0 Path Traversal via plugin_id
- CVE-2026-74883openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io
- CVE-2026-74882openssl_encrypt before 1.4.0 Insecure Default Configuration
- CVE-2026-74881openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins
- CVE-2026-74880openssl_encrypt before 1.4.0 Token Leakage via Query Parameters
- CVE-2026-74879openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint
- CVE-2026-74878openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypass
- CVE-2026-74877openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key
- CVE-2026-74876openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption