Skip to content
OpenAdvisories

Package · npm

ssb-db

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-4045

    Information disclosure in SSB-DB

    SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decry…

    ssbc SSB-DB ssb-db npm