Vendor

tink-crypto

1 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-109425

Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate() step before constructing a keyset.Handle, allowing malformed public or no-secre…

tink-crypto tink-go golang-github-tink-crypto-tink-go golang-github-tink-crypto-tink-go Debian Ubuntu

Oct 12, 2026