Node.js 22.14.0 is out, the first LTS release that includes the Corepack patch that fixes the "Cannot find matching keyid" error that has been impacting pnpm users recently. Full changelog and download info at nodejs.org/en/blog/rele...
Node.js — Node v22.14.0 (LTS)
Node.js® is a JavaScript runtime built on Chrome's V8 JavaScript engine.
nodejs.org
February 11, 2025 at 4:00 PM
Node.js 22.14.0 is out, the first LTS release that includes the Corepack patch that fixes the "Cannot find matching keyid" error that has been impacting pnpm users recently. Full changelog and download info at nodejs.org/en/blog/rele...
`Cannot find matching keyid` error with latest pnpm?
Upgrade to Node.js v22.14.0, which updates to the fixed Corepack 0.31.0 version:
Windows: choco upgrade nodejs # or nodejs-lts
macOS: brew upgrade node # or node@22
Ubuntu: sudo apt-get --only-upgrade install nodejs
Upgrade to Node.js v22.14.0, which updates to the fixed Corepack 0.31.0 version:
Windows: choco upgrade nodejs # or nodejs-lts
macOS: brew upgrade node # or node@22
Ubuntu: sudo apt-get --only-upgrade install nodejs
![Deploy log showing "Cannot find matching keyid" error:
3:29:43 PM: ! Corepack is about to download https://registry.npmjs.org/pnpm/-/pnpm-10.2.1.tgz
3:29:43 PM: /opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:21535
3:29:43 PM: if (key == null || signature == null) throw new Error(`Cannot find matching keyid: ${JSON.stringify({ signatures, keys })}`);
3:29:43 PM: ^
3:29:43 PM: Error: Cannot find matching keyid: {"signatures":[{"sig":"MEYCIQDkZyZZmBzkRcQowEEFiEcGp4/xV8GBLXxTEzz9QstrsAIhAPx6tvZixjTub6GPqJa82vcWFhUU39JCtoJvcoRK/K39","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"keys":[{"expires":null,"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","keytype":"ecdsa-sha2-nistp256","scheme":"ecdsa-sha2-nistp256","key":"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1Olb3zMAFFxXKHiIkQO5cJ3Yhl5i6UPp+IhuteBJbuHcA5UogKo0EWtlWwW6KSaKoTNEYL7JlCQiVnkhBktUgg=="}]}
3:29:43 PM: at verifySignature (/opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:21535:47)
3:29:43 PM: at installVersion (/opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:21882:7)
3:29:43 PM: at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
3:29:43 PM: at async Engine.ensurePackageManager (/opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:22316:32)
3:29:43 PM: at async Engine.executePackageManagerRequest (/opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:22416:25)
3:29:43 PM: at async Object.runMain (/opt/buildhome/.nvm/versions/node/v22.13.1/lib/node_modules/corepack/dist/lib/corepack.cjs:23102:5)
3:29:43 PM: Node.js v22.13.1](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:b3xwbnwkl5qzjjhkwoimvb6x/bafkreialhago73cb3xyz3eqg4zuzbyehbd4j4cgc63k4u4ybc6knlezpwm)
February 11, 2025 at 11:47 AM
`Cannot find matching keyid` error with latest pnpm?
Upgrade to Node.js v22.14.0, which updates to the fixed Corepack 0.31.0 version:
Windows: choco upgrade nodejs # or nodejs-lts
macOS: brew upgrade node # or node@22
Ubuntu: sudo apt-get --only-upgrade install nodejs
Upgrade to Node.js v22.14.0, which updates to the fixed Corepack 0.31.0 version:
Windows: choco upgrade nodejs # or nodejs-lts
macOS: brew upgrade node # or node@22
Ubuntu: sudo apt-get --only-upgrade install nodejs
The next sample was also Cladonia digitata #lichen. This one had more pronounced name giving "fingers" on the podetia.
Here is the link to the excellent ITALIC site:
italic.units.it/flora/index.php?procedure=view_external4&keyId=3975&species=1059¤tLead=68
Here is the link to the excellent ITALIC site:
italic.units.it/flora/index.php?procedure=view_external4&keyId=3975&species=1059¤tLead=68
May 9, 2024 at 9:50 PM
The next sample was also Cladonia digitata #lichen. This one had more pronounced name giving "fingers" on the podetia.
Here is the link to the excellent ITALIC site:
italic.units.it/flora/index.php?procedure=view_external4&keyId=3975&species=1059¤tLead=68
Here is the link to the excellent ITALIC site:
italic.units.it/flora/index.php?procedure=view_external4&keyId=3975&species=1059¤tLead=68
This does end up advancing, with Speaker Arch deciding to cast the 25th vote.
March 5, 2025 at 5:56 PM
This does end up advancing, with Speaker Arch deciding to cast the 25th vote.
this keyid juss fayuul, bacub
November 27, 2024 at 10:18 PM
this keyid juss fayuul, bacub
Or where the keyId & serviceId match?
February 6, 2026 at 1:51 AM
Or where the keyId & serviceId match?
corepack で pnpm 使おうとするとエラー出る
Error: Cannot find matching keyid
古いバージョンを入れれば問題なさそう
corepack install -g pnpm@9.14
10 や 9.15 はダメみたい
issue があったけど報告から1週間ほどあってまだオープンのままだし解決は先そう？
github.com/nodejs/corep...
Error: Cannot find matching keyid
古いバージョンを入れれば問題なさそう
corepack install -g pnpm@9.14
10 や 9.15 はダメみたい
issue があったけど報告から1週間ほどあってまだオープンのままだし解決は先そう？
github.com/nodejs/corep...
February 3, 2025 at 1:42 PM
corepack で pnpm 使おうとするとエラー出る
Error: Cannot find matching keyid
古いバージョンを入れれば問題なさそう
corepack install -g pnpm@9.14
10 や 9.15 はダメみたい
issue があったけど報告から1週間ほどあってまだオープンのままだし解決は先そう？
github.com/nodejs/corep...
Error: Cannot find matching keyid
古いバージョンを入れれば問題なさそう
corepack install -g pnpm@9.14
10 や 9.15 はダメみたい
issue があったけど報告から1週間ほどあってまだオープンのままだし解決は先そう？
github.com/nodejs/corep...
January 24, 2026 at 4:32 PM
February 8, 2026 at 7:34 PM
I am mostly on Mastodon: infosec.exchange/@bontchev I use Bluesky mostly for posting snide comments.
VessOnSecurity (@bontchev@infosec.exchange)
4.5K Posts, 52 Following, 1.17K Followers · Anti-virus, malware and infosec expert, crypto amateur, privacy advocate and general annoyance.
PGP keyID: 0x365697c632dd98d9
infosec.exchange
January 7, 2025 at 8:52 AM
I am mostly on Mastodon: infosec.exchange/@bontchev I use Bluesky mostly for posting snide comments.
I mostly post on Mastodon these days:
infosec.exchange/@bontchev
Although, when I update my blog, I post about it on Twitter, BlueSky, LinkedIn, and Facebook too.
infosec.exchange/@bontchev
Although, when I update my blog, I post about it on Twitter, BlueSky, LinkedIn, and Facebook too.
VessOnSecurity (@bontchev@infosec.exchange)
10.1K Posts, 51 Following, 1.54K Followers · Anti-virus, malware and infosec expert, crypto amateur, privacy advocate and general annoyance.
PGP keyID: 0x365697c632dd98d9
infosec.exchange
August 26, 2026 at 2:12 PM
I mostly post on Mastodon these days:
infosec.exchange/@bontchev
Although, when I update my blog, I post about it on Twitter, BlueSky, LinkedIn, and Facebook too.
infosec.exchange/@bontchev
Although, when I update my blog, I post about it on Twitter, BlueSky, LinkedIn, and Facebook too.
@cocoa_vrc 大まかに言うと以下の通りです。
1. アクティビティの`actor`を照会します。
2. 照会したアクターオブジェクト内の`publicKey`属性を照会します。
3. 公開鍵のid属性が`keyId`と一致するか確認します。
1. アクティビティの`actor`を照会します。
2. 照会したアクターオブジェクト内の`publicKey`属性を照会します。
3. 公開鍵のid属性が`keyId`と一致するか確認します。
March 15, 2025 at 6:01 AM
@cocoa_vrc 大まかに言うと以下の通りです。
1. アクティビティの`actor`を照会します。
2. 照会したアクターオブジェクト内の`publicKey`属性を照会します。
3. 公開鍵のid属性が`keyId`と一致するか確認します。
1. アクティビティの`actor`を照会します。
2. 照会したアクターオブジェクト内の`publicKey`属性を照会します。
3. 公開鍵のid属性が`keyId`と一致するか確認します。
How does it work
One proposed solution relies on HTTP Message Signatures (RFC 9421). Bots sign the host of the request they are making, add a validity window, and send the signature with the request.
See the demo http-message-signatures-example.research.cloudflare.com.
One proposed solution relies on HTTP Message Signatures (RFC 9421). Bots sign the host of the request they are making, add a validity window, and send the signature with the request.
See the demo http-message-signatures-example.research.cloudflare.com.
May 15, 2025 at 3:24 PM
How does it work
One proposed solution relies on HTTP Message Signatures (RFC 9421). Bots sign the host of the request they are making, add a validity window, and send the signature with the request.
See the demo http-message-signatures-example.research.cloudflare.com.
One proposed solution relies on HTTP Message Signatures (RFC 9421). Bots sign the host of the request they are making, add a validity window, and send the signature with the request.
See the demo http-message-signatures-example.research.cloudflare.com.
CVE-2026-52769: YesWiki 4.6.2–4.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched—update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in
September 8, 2026 at 7:40 AM
CVE-2026-52769: YesWiki 4.6.2–4.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched—update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in
Jianjie Luo, Yiming Zhong, Haoming Shen, Yupeng Xiao, Zhenguo Yang
KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation
https://arxiv.org/abs/2608.16154
KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation
https://arxiv.org/abs/2608.16154
August 18, 2026 at 7:06 PM
Jianjie Luo, Yiming Zhong, Haoming Shen, Yupeng Xiao, Zhenguo Yang
KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation
https://arxiv.org/abs/2608.16154
KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation
https://arxiv.org/abs/2608.16154
Jianjie Luo, Yiming Zhong, Haoming Shen, Yupeng Xiao, Zhenguo Yang: KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation https://arxiv.org/abs/2608.16154 https://arxiv.org/pdf/2608.16154 https://arxiv.org/html/2608.16154
August 18, 2026 at 6:42 AM
Jianjie Luo, Yiming Zhong, Haoming Shen, Yupeng Xiao, Zhenguo Yang: KeyID: Decoupled Drafting and Keyframe Editing for Identity-Preserving Video Generation https://arxiv.org/abs/2608.16154 https://arxiv.org/pdf/2608.16154 https://arxiv.org/html/2608.16154
CVE-2026-18859 - ESAFENET CDG usbkey;logindojojs sql injection
CVE ID : CVE-2026-18859
Published : Aug. 5, 2026, 1:16 a.m. | 1 hour ago
Description : A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/uk...
CVE ID : CVE-2026-18859
Published : Aug. 5, 2026, 1:16 a.m. | 1 hour ago
Description : A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/uk...
CVE-2026-18859 - ESAFENET CDG usbkey;logindojojs sql injection
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early …
cvefeed.io
August 5, 2026 at 2:24 AM
CVE-2026-18859 - ESAFENET CDG usbkey;logindojojs sql injection
CVE ID : CVE-2026-18859
Published : Aug. 5, 2026, 1:16 a.m. | 1 hour ago
Description : A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/uk...
CVE ID : CVE-2026-18859
Published : Aug. 5, 2026, 1:16 a.m. | 1 hour ago
Description : A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/uk...
going through my semiannual gpg / yubikey rotation and finding a ton of gpg tutorials / cheatsheets that suggest doing:
`gpg --export-secret-keys --armor $KEYID > masterkey.asc`
That file is unencrypted!
Correct approaches to backing up & moving keys: vhs.codeberg.page/post/moving-...
`gpg --export-secret-keys --armor $KEYID > masterkey.asc`
That file is unencrypted!
Correct approaches to backing up & moving keys: vhs.codeberg.page/post/moving-...
Moving GPG Keys Privately
How to privately move your GPG keys from one machine to another.
vhs.codeberg.page
November 29, 2024 at 10:31 PM
going through my semiannual gpg / yubikey rotation and finding a ton of gpg tutorials / cheatsheets that suggest doing:
`gpg --export-secret-keys --armor $KEYID > masterkey.asc`
That file is unencrypted!
Correct approaches to backing up & moving keys: vhs.codeberg.page/post/moving-...
`gpg --export-secret-keys --armor $KEYID > masterkey.asc`
That file is unencrypted!
Correct approaches to backing up & moving keys: vhs.codeberg.page/post/moving-...
Making use of an encryption keyid overflow vulnerability. http://pastebin.com/evD7EgtE
February 11, 2024 at 6:41 AM
Making use of an encryption keyid overflow vulnerability. http://pastebin.com/evD7EgtE