Known Vulnerabilities for Http-signature by Joyent
Listed below are 1 of the newest known vulnerabilities associated with "Http-signature" by "Joyent".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104445 json | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-100571 json | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-97731 json | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Am... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-94455 json | An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authen... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-92595 json | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-90679 json | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrit... | Not Provided | 2026-09-13 | 2026-09-15 |
| CVE-2026-86080 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a web... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-84717 json | A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook ... | Not Provided | 2026-09-23 | 2026-09-26 |
| CVE-2026-82180 json | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, Ce... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-71277 json | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP heade... | Not Provided | 2026-08-05 | 2026-08-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Joyent | Http-signature | 1.2.0 | |||
| Application | Joyent | Http-signature | 1.1.1 | |||
| Application | Joyent | Http-signature | 1.1.0 | |||
| Application | Joyent | Http-signature | 1.0.2 | |||
| Application | Joyent | Http-signature | 1.0.1 | |||
| Application | Joyent | Http-signature | 1.0.0 | |||
| Application | Joyent | Http-signature | 0.9.9 | |||
| Application | Joyent | Http-signature | 0.9.8 | |||
| Application | Joyent | Http-signature | 0.9.7 | |||
| Application | Joyent | Http-signature | 0.9.6 | |||
| Application | Joyent | Http-signature | 0.9.5 | |||
| Application | Joyent | Http-signature | 0.9.4 | |||
| Application | Joyent | Http-signature | 0.9.3 | |||
| Application | Joyent | Http-signature | 0.9.2 | |||
| Application | Joyent | Http-signature | 0.9.11 | |||
| Application | Joyent | Http-signature | 0.9.10 | |||
| Application | Joyent | Http-signature | 0.9.0 | |||
| Application | Joyent | Http-signature | 0.11.0 | |||
| Application | Joyent | Http-signature | 0.10.1 | |||
| Application | Joyent | Http-signature | 0.10.0 |