17 matches found
Missing Release of Resource after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime due to reliance on the finalize process for zeroizing sensitive key material. An attacker can potentially access sensitive cryptographic keys by exploiting delays in garbage collectio...
8.7CVSS5.9AI score0.00428EPSS
SaveExploits0References2
20