GitHub Advisoryadvisory · Maven

GHSA-w8cp-frxc-55pj Kwik does not discard unused encryption keys

MEDIUM Published 2024-05-24 Modified 2024-05-24 Official page ↗
Aliases
CVE-2024-22588
Ecosystem
Maven
Packages
tech.kwik:kwik
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-327, CWE-400
Reviewed
2024-05-24

Affected packages

• Maven tech.kwik:kwik: < 0.8 → fixed in 0.8

Description

Kwik commit 745fd4e2 does not discard unused encryption keys.

Related

Alias · CVE (1)

  • CVE-2024-22588 Kwik commit 745fd4e2 does not discard unused encryption keys. vulnerability

Weakness · CWE (2)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References