Skip to content
OpenAdvisories

Package · npm

tenvoy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2021-32685

    Improper Verification of Cryptographic Signature in tenvoy

    tEnvoy contains the PGP, NaCl, and PBKDF2 in node.js and the browser (hashing, random, encryption, decryption, signatures, conversions), used by TogaTech.org. In versions prior to 7.0.3, the `verifyWithMessage` method of `tEnvoyNaClSigningKey` always returns …

    TogaTech tEnvoy tenvoy npm