Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/06/11 12:6 a.m.2 views

CVE-2025-45001

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...

7.5CVSS7.2AI score0.00105EPSS
Exploits1References1
OSV
OSV
added 2025/06/09 6:32 p.m.2 views

GHSA-FJ44-H6XW-896G react-native-keys insecurely stores encryption cipher and Base64 chunks

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...

7.5CVSS5.5AI score0.00105EPSS
Exploits1References4
NVD
NVD
added 2025/06/09 5:15 p.m.9 views

CVE-2025-45001

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...

7.5CVSS0.00105EPSS
Exploits1References2
OSV
OSV
added 2025/06/09 5:15 p.m.2 views

CVE-2025-45001

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...

7.5CVSS6.4AI score0.00105EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/06/09 12:0 a.m.2 views

CVE-2025-45001

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...

6.4AI score0.00105EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.0 views

npm react-native-keys 安全漏洞

npm react-native-keys is a mobile environment variable security library from US-based npm. A security vulnerability exists in npm react-native-keys version 0.7.11, which stems from encrypted passwords and Base64 blocks being stored in plaintext in compiled native binaries, potentially leading to...

7.5CVSS6.2AI score0.00105EPSS
Exploits1References3
CVE
CVE
added 2025/06/09 12:0 a.m.47 views

CVE-2025-45001

CVE-2025-45001 affects react-native-keys 0.7.11. The issue is that encryption cipher data and Base64 chunks are stored as plaintext in the compiled native binary, enabling leakage of secrets through basic static analysis. Documents consistently describe this as a remote information-disclosure vul...

7.5CVSS6.4AI score0.00105EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.3 views

PT-2025-24542 · Unknown · React-Native-Keys

Name of the Vulnerable Software and Affected Versions: react-native-keys version 0.7.11 Description: The issue concerns sensitive information disclosure, where encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basi...

7.5CVSS5.7AI score0.00105EPSS
Exploits1References12
Rows per page
Query Builder