Skip to content
OpenAdvisories

Package · Hex

cloak

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-94206

    Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds

    Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than c…

    danielberkompas cloak cloak_ecto cloak Hex
  • High 8.2
    CVE-2026-95105

    Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

    Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping. Cloak.Ciphers.…

    danielberkompas cloak cloak Hex