| Package | Affected versions | Patched versions |
|---|---|---|
| opencryptoki | < 3.23.0 | 3.23.0 |
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free