VYPR

CAManager

by Go

CVEs (1)

  • CVE-2026-48025Jun 10, 2026
    risk 0.00cvss epss

    `internal/pki/resolver.go:36-64` constructs a `CAManager` with the plaintext `ed25519.PrivateKey` after unwrapping via the master key; `internal/pki/ca.go:13-16` stores it. Callers at `internal/api/enroll.go:116`, `internal/api/updates.go:297`, and…