Skip to content
OpenAdvisories

Product · CERT/CC

cveClient/encrypt-storage.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-35467

    Private Key stored as extractable in browser IndexeDB

    The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

    CERT/CC cveClient/encrypt-storage.js