RP
Vendor
Rhonabwy Project
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-25714 | RH Rhonabwy Rhonabwy Project | 9.8 | Feb 11 | In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first… |
| CVE-2022-38493 | RH Rhonabwy Rhonabwy Project | 7.5 | Aug 20 | Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption |
| CVE-2022-32096 | RH Rhonabwy Rhonabwy Project | 7.5 | Jul 13 | Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap |