Approved changes feed: RSS · Atom
cpe:2.3:a:rhonabwy_project:rhonabwy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Rhonabwy Project (73a3f349-c5f3-5c1f-80b2-00c2e46aff26) |
|---|---|
| Product | Rhonabwy (e4f3d745-be7d-554f-87e5-b85220537167) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/rhonabwy |
purl2cpe | 2026-06-01 10:11:41.203060 |
pkg:deb/ubuntu/rhonabwy |
purl2cpe | 2026-06-01 10:11:41.203063 |
pkg:github/babelouest/rhonabwy |
purl2cpe | 2026-06-01 10:11:41.203066 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25714 |
vulnerable | 2026-06-08 06:31:23.783177 |
Details available
In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. (The fix uses gnutls_memcmp, which has constant-time execution.)
Published: 2024-02-11T00:00:00.000Z
Updated: 2024-08-01T23:52:06.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38493 |
vulnerable | 2026-06-08 05:47:16.549482 |
Details available
Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryption) token.
Published: 2022-08-20T19:41:15.000Z
Updated: 2024-08-03T10:54:03.986Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32096 |
vulnerable | 2026-06-08 05:44:42.567459 |
Details available
Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.
Published: 2022-07-13T15:42:14.000Z
Updated: 2024-08-03T07:32:56.070Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.