Skip to content
OpenAdvisories

Package · Maven

com.google.crypto.tink:tink

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2020-8929

    Ciphertext integrity weakness in Tink

    A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This ca…

    Google Tink tink com.google.crypto.tink:tink Maven PyPI