Skip to content
OpenAdvisories

Package · npm

sealed-env

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-45091 Public exploit

    sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

    sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot. In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embedded the operator's literal TOTP secret in the JWS payload of every minted unse…

    davidalmeidac sealed-env sealed-env io.github.davidalmeidac:sealed-env-core npm Maven