Skip to content
OpenAdvisories

Package · Go

github.com/cloudflare/gokey

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-13353

    gokey allows secret recovery from a seed file without the master password

    In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM authentication tag of the key seed. This issue has been fixed in gokey version 0.2.0. This is a breaki…

    Cloudflare gokey gokey github.com/cloudflare/gokey Debian Ubuntu Go