RH
Product
Rhonabwy
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Rhonabwy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25714 | 9.8 | Feb 11 | In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first… Affected: through 1.1.3 |
| CVE-2022-38493 | 7.5 | Aug 20 | Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption Affected: 0.9.99 before 1.1.6 |
| CVE-2022-32096 | 7.5 | Jul 13 | Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap Affected: before 1.1.5 |
Showing 3