CVE-2025-45001
CVE-2025-45001
This page contains facts from public vulnerability sources. Check the original advisory before updating.
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
CVSS 7.5 · High · EPSS 0.2%
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
react-native-keys npm
- Affected ranges
- SEMVER: ≤ 0.7.11
No fix published