Known Vulnerabilities for Http-signature by Joyent
Listed below are 1 of the newest known vulnerabilities associated with "Http-signature" by "Joyent".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109553 json | Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only princi... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-108971 json | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of ... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-107597 json | PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and t... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-105869 json | Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Tok... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-104445 json | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-100571 json | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-97731 json | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Am... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-96618 json | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirro... | Not Provided | 2026-10-12 | 2026-10-16 |
| CVE-2026-94455 json | An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authen... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-92595 json | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` ... | Not Provided | 2026-09-16 | 2026-09-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Joyent | Http-signature | 1.2.0 | |||
| Application | Joyent | Http-signature | 1.1.1 | |||
| Application | Joyent | Http-signature | 1.1.0 | |||
| Application | Joyent | Http-signature | 1.0.2 | |||
| Application | Joyent | Http-signature | 1.0.1 | |||
| Application | Joyent | Http-signature | 1.0.0 | |||
| Application | Joyent | Http-signature | 0.9.9 | |||
| Application | Joyent | Http-signature | 0.9.8 | |||
| Application | Joyent | Http-signature | 0.9.7 | |||
| Application | Joyent | Http-signature | 0.9.6 | |||
| Application | Joyent | Http-signature | 0.9.5 | |||
| Application | Joyent | Http-signature | 0.9.4 | |||
| Application | Joyent | Http-signature | 0.9.3 | |||
| Application | Joyent | Http-signature | 0.9.2 | |||
| Application | Joyent | Http-signature | 0.9.11 | |||
| Application | Joyent | Http-signature | 0.9.10 | |||
| Application | Joyent | Http-signature | 0.9.0 | |||
| Application | Joyent | Http-signature | 0.11.0 | |||
| Application | Joyent | Http-signature | 0.10.1 | |||
| Application | Joyent | Http-signature | 0.10.0 |