Approved changes feed: RSS · Atom

cpe:2.3:a:sks_keyserver_project:sks_keyserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSks Keyserver Project (ab5e8cf7-3c84-55d6-a67b-d221d17cdea8)
ProductSks Keyserver (dfa266ee-adab-59b5-83ba-722495e02695)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/sks-keyserver/sks-keyserver purl2cpe 2026-06-01 10:13:47.217457

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13050 vulnerable 2026-06-08 05:12:40.816484 Details available
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
Published: 2019-06-29T16:07:13.000Z
Updated: 2024-08-04T23:41:09.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3207 vulnerable 2026-06-08 05:05:31.872687 Details available
Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to pks/lookup/undefined1.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T10:35:56.958Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.