CVE-2026-31839
CVE-2026-31839 · Striae has a hash validation utility vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.
CVSS 8.2 · High · EPSS 0.1% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
striae
- Versions
- >= 0.9.22-0, < 3.0.0: Affected
No fix published
@striae-org/striae npm
- Affected ranges
- SEMVER: ≥ 0.9.22-0, < 3.0.0
Update to 3.0.0