VDB
JLSEC-2026-256
JLSEC-2026-256
PUBLISHED
CVSS 8.800000190734863 HIGH
Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can...
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | OpenSSL_jll | 3.5.0+0, 3.0.8+0, 3.5.0+0 |
| Julia | Openresty_jll | 1.27.1+0, 1.27.1+0 |
| Julia | Openresty_jll | 1.27.1+0 |
| Julia | OpenSSL_jll | 3.5.0+0, 3.0.8+0 |
Timeline
- Apr 27, 2026 CVE Published
- Jul 18, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
References
- http://www.openwall.com/lists/oss-security/2026/01/27/10 url
- http://www.openwall.com/lists/oss-security/2026/02/25/6 url
- https://access.redhat.com/errata/RHSA-2026:1472 url
- https://access.redhat.com/errata/RHSA-2026:1473 url
- https://access.redhat.com/errata/RHSA-2026:1496 url
- https://access.redhat.com/errata/RHSA-2026:1503 url
- https://access.redhat.com/errata/RHSA-2026:1519 url
- https://access.redhat.com/errata/RHSA-2026:1594 url
- https://access.redhat.com/errata/RHSA-2026:1733 url
- https://access.redhat.com/errata/RHSA-2026:1736 url
- https://access.redhat.com/errata/RHSA-2026:2072 url
- https://access.redhat.com/errata/RHSA-2026:2077 url
- https://access.redhat.com/errata/RHSA-2026:2485 url
- https://access.redhat.com/errata/RHSA-2026:2563 url
- https://access.redhat.com/errata/RHSA-2026:2633 url
- https://access.redhat.com/errata/RHSA-2026:2659 url
- https://access.redhat.com/errata/RHSA-2026:2671 url
- https://access.redhat.com/errata/RHSA-2026:2844 url
- https://access.redhat.com/errata/RHSA-2026:2974 url
- https://access.redhat.com/errata/RHSA-2026:2995 url
…and 22 more