VYPR

Cryptacular

by Vt

CVEs (1)

  • CVE-2020-7226HigJan 24, 2020
    risk 0.42cvss 7.5epss 0.03

    CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of…