badkeys vulnerabilities

Products

• badkeys 1

Latest badkeys CVEs

Newest publication first

1. CVE-2026-21439 badkeys vulnerable to ASCII control character injection on console via malformed input

   Published 2026-01-05

   Low·CVSS 2.0 EPSS 0.33%

   badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the bad...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.