Approved changes feed: RSS · Atom

cpe:2.3:a:cert/cc:cveclient/encrypt-storage.js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCert/Cc (aac4cca4-7ea6-5fd3-b45a-07513e58b290)
ProductCveclient/Encrypt Storage.Js (a34dc598-b9c6-599b-995b-e496d9b9f884)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-35467 vulnerable 2026-06-08 07:59:14.036697 Private Key stored as extractable in browser IndexeDB
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.
Published: 2026-04-02T20:27:27.792Z
Updated: 2026-04-03T13:51:22.012Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.