CVE-2025-64767

🗓️ 21 Nov 2025 18:47:19Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 19 Views

Hpke-js pre 1.7.5 Seal() nonce reuse risked confidentiality and integrity; fixed in 1.7.5.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-64767	19 Nov 202522:23	–	circl
CNNVD	hpke-js 安全漏洞	21 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-64767 hpke-js reuses AEAD nonces	21 Nov 202518:47	–	cvelist
EUVD	EUVD-2025-198319	21 Nov 202518:47	–	euvd
Github Security Blog	@hpke/core reuses AEAD nonces	20 Nov 202517:36	–	github
NVD	CVE-2025-64767	21 Nov 202519:16	–	nvd
OSV	CVE-2025-64767 hpke-js reuses AEAD nonces	21 Nov 202518:47	–	osv
OSV	GHSA-73G8-5H73-26H4 @hpke/core reuses AEAD nonces	20 Nov 202517:36	–	osv
Positive Technologies	PT-2025-47653	20 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-64767	26 Nov 202516:56	–	redhatcve

Vulners

Node

dajiaji hpke-jsRange<1.7.5

[
  {
    "vendor": "dajiaji",
    "product": "hpke-js",
    "versions": [
      {
        "version": "< 1.7.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf
github	www.github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4
github	www.github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts

17 Jun 2026 09:55Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.1

EPSS0.00193

SSVC

CWE-323