openssl_encrypt vulnerabilities

42 known vulnerabilities in openssl_encrypt from Jahlives. 42 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  openssl_encrypt: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-74874Aug 17, 2026Jahlives

  openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624

• 9.8 Critical severity

  openssl_encrypt: Untrusted Search Path

  CVE-2026-74872Aug 17, 2026Jahlives

  openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the