Skip to content

Vendor

aescrypt project vulnerabilities

1 published CVE affecting aescrypt project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of aescrypt project alerts

Products

Latest aescrypt project CVEs

Newest publication first

  1. CVE-2013-7463 Aescrypt does not sufficiently use random values

    Published
    HighCVSS 7.5 PoC

    The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.