Approved changes feed: RSS · Atom

cpe:2.3:a:kee:keepassrpc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKee (fa823449-101f-5fd2-81a6-aee38808640c)
ProductKeepassrpc (bbe161cd-4bbe-5631-92ab-5828e3191802)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kee-org/keepassrpc purl2cpe 2026-06-01 10:11:58.291401

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-16272 vulnerable 2026-06-08 05:19:27.873060 Details available
The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database via an A=0 WebSocket connection.
Published: 2020-08-03T16:19:11.000Z
Updated: 2024-08-04T13:37:54.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16271 vulnerable 2026-06-08 05:19:27.872647 Details available
The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection.
Published: 2020-08-03T16:19:23.000Z
Updated: 2024-08-04T13:37:54.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.