CVE-2026-32309: Cleartext Transmission of Sensitive Information

Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.1, the Hub-based unlock flow explicitly supports hub+http and consumes Hub endpoints from vault metadata without enforcing HTTPS. As a result, a vault configuration can drive OAuth and key-loading traffic over...

Malicious code in hub-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9920de843636c87bd01226d0b5d9c01ebd471831e91e5229eaecffa016481f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3710 Malicious code in hub-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9920de843636c87bd01226d0b5d9c01ebd471831e91e5229eaecffa016481f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2018-3913

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 32 bytes. An attacker can...