High severityNVD Advisory· Published Jun 9, 2025· Updated Jun 9, 2025

CVE-2025-45001

Description

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
react-native-keysnpm	<= 0.7.11	—

Affected products

react-native-keys/react-native-keysdescription
ghsa-coords
pkg:npm/react-native-keys
Range: <= 0.7.11

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-fj44-h6xw-896gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-45001ghsaADVISORY
gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5ghsaWEB
github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000