Lucene search
+L

1 matches found

OSV
OSV
added 2021/09/02 5:17 p.m.34 views

GHSA-VRMR-F2QH-3HHF Improper use of cryptographic key in wal-g

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

7.5CVSS7.5AI score0.00834EPSS
SaveExploits0References5
Rows per page
Query Builder