CVE-2025-64767

CVE-2025-64767 (hpke-js) affects hpke-js prior to version 1.7.5, where the public SenderContext Seal() API can race and reuse the same AEAD nonce for multiple calls. This nonce reuse can lead to complete loss of confidentiality and integrity of produced messages. The issue is fixed in version 1.7...

CVE-2025-64767 hpke-js reuses AEAD nonces

hpke-js is a Hybrid Public Key Encryption HPKE module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal calls. This can lead to complete loss of Confidentiality...