Skip to content
OpenAdvisories

Package · Hex

cloak

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

    Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping. Cloak.Ciphers.…