Created
July 30, 2025 01:44
-
-
Save ZupeiNie/9de26f17a5e135b50fa388999e912c42 to your computer and use it in GitHub Desktop.
poco < v1.14.1-release was discovered to contain weak encryption.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| CVE: CVE-2025-45766 | |
| Description: | |
| we found that the HMAC and RSA key lengths used in your JSON Web Signature (JWS) implementation do not meet recommended security standards(RFC 7518、NIST SP800-117、RFC 2437). According to CWE-326 (Inadequate Encryption Strength), using keys that are too short can lead to serious vulnerabilities and potential attacks. | |
| Affected versions: <= v1.14.1 | |
| Reference: https://github.com/pocoproject/poco/issues/4921 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment