Vulnerabilities > Rhonabwy Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-11 | CVE-2024-25714 | Information Exposure Through Discrepancy vulnerability in multiple products In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. | 9.8 |
| 2022-08-20 | CVE-2022-38493 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Rhonabwy Project Rhonabwy Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. | 7.5 |
| 2022-07-13 | CVE-2022-32096 | Classic Buffer Overflow vulnerability in Rhonabwy Project Rhonabwy Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. | 7.5 |