DEBIAN-CVE-2026-109425

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

EUVD-2026-97823

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425

The Tink-go (tink-crypto/tink-go) library through version 2.8.0 is vulnerable to an input-validation flaw. The functions keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() fail to execute the structural Validate() step before constructing a keyset.Handle. This allows the acceptance of malfor...

CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425: Improper Validation of Syntactic Correctness of Input

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...