GHSA-CRXP-CHH4-9GHP Jervis has Deterministic AES IV Derivation from Passphrase

🗓️ 13 Jan 2026 14:51:58Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Deterministic AES IV from passphrase in Jervis causes IV reuse; upgrade to Jervis 2.2 with random IV.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-68701	13 Jan 202619:40	–	circl
CNNVD	Jervis 安全漏洞	13 Jan 202600:00	–	cnnvd
CVE	CVE-2025-68701	13 Jan 202619:21	–	cve
Cvelist	CVE-2025-68701 Jervis has Deterministic AES IV Derivation from Passphrase	13 Jan 202619:21	–	cvelist
EUVD	EUVD-2026-2027	13 Jan 202619:21	–	euvd
Github Security Blog	Jervis has Deterministic AES IV Derivation from Passphrase	13 Jan 202614:51	–	github
NVD	CVE-2025-68701	13 Jan 202620:16	–	nvd
OSV	CVE-2025-68701 Jervis has Deterministic AES IV Derivation from Passphrase	13 Jan 202619:21	–	osv
Positive Technologies	PT-2026-2494	13 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-68701	14 Jan 202619:25	–	redhatcve

Source	Link
github	www.github.com/samrocketman/jervis/security/advisories/GHSA-crxp-chh4-9ghp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68701
github	www.github.com/samrocketman/jervis/commit/c3981ff71de7b0f767dfe7b37a2372cb2a51974a
github	www.github.com/samrocketman/jervis
github	www.github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovy
github	www.github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovy
github	www.github.com/samrocketman/jervis/commit/c3981ff71de7b0f767dfe7b37a2372cb2a51974a

03 Feb 2026 03:11Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 48.7

EPSS0.00202