GHSA-wc6p-4gwj-jcr8
Medium · 6.3Duplicate Advisory: Keylime has a hardcoded attestation challenge nonce that allows replay attacks
CVSS
6.3
EPSS
—
Published
May 6, 2026
CISA due date
—
The record
This advisory has been withdrawn.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73576 In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation… CWE-1241
- CVE-2026-57869 Broken object-level access controls and the use of a deterministic pattern during random… CWE-1241
- CVE-2026-6420 A flaw was found in Keylime. CWE-1241
- CVE-2025-13079 The Popup Builder – Create highly converting, mobile friendly marketing popups. CWE-1241
- CVE-2025-32056 The anti-theft protection mechanism can be bypassed by attackers due to weak response… CWE-1241
- CVE-2026-38739 ezsystems/ezpublish-legacy has a SQL injection in dfscleanup CWE-937
- CVE-2026-47121 Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta CWE-937
- CVE-2026-47255 AgenticMail API/storage and outbound relay hardening fixes CWE-937