In breve
- CVE-2025-45001 è una vulnerabilità ALTO (CVSS 7.5) che riguarda react-native-keys (numan), react-native-keys.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.20%, superiore al 10.3% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
NVD description
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free