pkg:Debian/rhonabwy

3 total CVEsCRITICAL1HIGH2

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.8CVE-2024-25714In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops…
    from 0
  • HIGH7.5CVE-2022-38493Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption.
    from 0, < 1.1.7-1
  • HIGH7.5CVE-2022-32096Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap.
    from 0, < 0.9.13-3+deb11u2