Skip to content
OpenAdvisories

Package · Go

github.com/bincyber/go-sqlcrypter

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    GHSA-2j6r-9vv4-6gf5

    github.com/bincyber/go-sqlcrypter vulnerable to IV collision

    There is a risk of an IV collision using the awskms or aesgcm provider. NIST SP 800-38D section 8.3 states that it is unsafe to encrypt more than 2^32 plaintexts under the same key when using a random IV. The limit could easily be reached given the use case o…

    github.com/bincyber/go-sqlcrypter Go