CWE-354 Improper Validation of Integrity Check Value

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

melange: Incomplete package integrity verification allows data section substitution

Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption

nginx-ui Backup Restore Allows Tampering with Encrypted Backups

pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs

SP1 V6 Recursion Circuit Row-Count Binding Gap

Incus does not verify combined fingerprint when downloading images from simplestreams servers

simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption

xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption

Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

Striae has a hash validation utility vulnerability

Improper Digest Verification in httpsig-hyper May Allow Message Integrity Bypass

rPGP's integrity protection of encrypted data was not always checked

go-git improperly verifies data integrity values for .idx and .pack files

Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH

AsyncSSH Rogue Session Attack

AsyncSSH Rogue Extension Negotiation

JWE is missing AES-GCM authentication tag validation in encrypted JWE

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

electron ASAR Integrity bypass by just modifying the content

Apache MINA SSHD: integrity check bypass