Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/14 8:30 p.m.14 views

electerm's encrypt method not safe enough

Impact Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common passwords across installs and perform undetected ciphertext bit-flips to alte...

9.1CVSS5.8AI score0.00105EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder