Topic
Authentication
3 stories about Authentication that passed the news check, newest first.
Security · High impact ·
Alpine Linux : openssh-server password authentication bypass
Alpine Linux published an advisory on 2026-11-05 about an openssh-server password authentication bypass.
Lobsters · 3 sources
Security · High impact ·
InfiniteWP Client: the NOSSL signing key has 31 bits of secret — recovered live in 291.9 seconds
InfiniteWP Client 1.13.10, a WordPress management plugin on roughly 200,000 installs, has a NOSSL authentication branch whose signing key has only 31 bits of secret.
Open Source Security
Security · High impact ·
Supabase raw_user_meta_data: how a sign-up became Owner
raw_user_meta_data holds whatever the browser passes to supabase.auth.signUp().
DEV Community: backend