Skip to content
OpenAdvisories

Vendor

TogaTech

1 known vulnerabilities.

Products

tEnvoy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-32685

    Improper Verification of Cryptographic Signature in tenvoy

    tEnvoy contains the PGP, NaCl, and PBKDF2 in node.js and the browser (hashing, random, encryption, decryption, signatures, conversions), used by TogaTech.org. In versions prior to 7.0.3, the `verifyWithMessage` method of `tEnvoyNaClSigningKey` always returns …

    TogaTech tEnvoy tenvoy npm