CVE-2026-95105

The cloak library, from version 0.1.0-pre onward, is vulnerable to a chosen-plaintext forgery due to a lack of ciphertext authentication. Specifically, the Cloak.Ciphers.AES.CTR and Cloak.Ciphers.Deprecated.AES.CTR components use AES-256 in CTR mode but do not include a MAC (Message Authenticatio...