Curve KeyPairs fail to encrypt in github.com/nats-io/nkeys
Curve KeyPairs always use the same (all-zeros) key to encrypt data, and provide no security.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46129US | high7.5OT elevated | — | ||
NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling lib… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan