CVE-2026-74875 in openssl_encrypt
要約
〜によって MITRE • 2026年08月17日
openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process malicious data.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.