CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation

Duplicate Advisory: SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation

Spring Web Services: Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default

http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI

grepai Uses a Broken or Risky Cryptographic Algorithm

grepai Uses a Broken or Risky Cryptographic Algorithm

claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision

gree/jose - "None" Algorithm treated as valid in tokens

LMCache: 16-bit multimodal hash collision can poison KV cache entries

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

MLflow: Deterministic sampling in dataset digest enables predictable collisions

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

Gradio: Audio cache key ignores metadata when saving numpy audio outputs

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

HAXcms: Private Key Disclosure via Broken HMAC Implementation

Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

Apache Tomcat: Configured cipher preference order not preserved

Paramiko rsakey.py allows the SHA-1 algorithm