oss-security mailing list openwall.com ↗

Openwall's mailing list for open-source security issue disclosure and discussion.

ServiceSecurity & privacymailing-listvulnerabilitiesdisclosure

Recommended in 1 thread

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
atlasum.net · 1 day ago
It covers many issues, including this CVE, early.

OpenSSH Security & privacy
The standard open-source SSH client and server suite.
1 thread
Infisical Security & privacy
An open source secrets management platform.
1 thread
OSV-Scanner ↗Security & privacy
Google's open-source scanner that checks dependencies and software against the OSV vulnerability database.
1 thread
AWS WAF Security & privacy
Amazon's managed web application firewall service.
1 thread
OutGuess ↗Security & privacy
A steganography tool that hides data in the redundant bits of JPEG images.
1 thread
BoringSSL Security & privacy
Google's fork of OpenSSL used in Chrome and Android.
1 thread
pwn.watch ↗Security & privacy
A vulnerability tracking site with an RSS feed.
1 thread
Microsoft SEAL Security & privacy
An open-source library for homomorphic encryption.
1 thread

1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
4 threads
Tor
An anonymity network that routes traffic through volunteer relays.
3 threads
YubiKey ↗
A hardware security key supporting FIDO2, PIV and OpenPGP.
3 threads
Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Convergence ↗
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
2 threads
Ente Photos
An end-to-end encrypted photo storage service.
2 threads
Lockdown Mode ↗
An optional iOS hardening mode that restricts attachments, web features and connections.
2 threads
Paranoid Crypto ↗
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
2 threads
SELinux ↗
A Linux kernel security module for mandatory access control.
2 threads
Tuta ↗
An end-to-end encrypted email service based in Germany.
2 threads
ACME Renewal Information
An ACME extension that lets CAs tell clients when to renew certificates early.
1 thread

Link from a commenter, not checked or endorsed by us: ↗ https://www.openwall.com/lists/oss-security/