{"id":"EUVD-2025-198319","enisaUuid":"b7b02108-082d-32e1-8f66-dc01c5027352","description":"hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.","datePublished":"Nov 21, 2025, 6:47:19 PM","dateUpdated":"Nov 21, 2025, 7:01:11 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4\nhttps://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf\nhttps://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34\n","aliases":"CVE-2025-64767\nGHSA-73g8-5h73-26h4\n","assigner":"GitHub_M","epss":0.23,"enisaIdProduct":[{"id":"fa582a6f-439a-3cfe-aa67-68e8ccb9969e","product":{"name":"hpke-js","vendor":{"name":"dajiaji"}},"product_version":"\u003c 1.7.5"}],"enisaIdVendor":[{"id":"a30ffcb2-cded-30ae-a6ab-b0b0f3b34d89","vendor":{"name":"dajiaji"}}],"enisaIdVulnerability":[{"id":"4d21036a-16ff-3b6e-9336-3178750f2b85","vulnerability":{"id":"GHSA-73g8-5h73-26h4","description":"@hpke/core reuses AEAD nonces","datePublished":"Nov 20, 2025, 5:36:13 PM","dateUpdated":"Nov 21, 2025, 10:18:25 PM","baseScore":0.0,"references":"https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64767\nhttps://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf\nhttps://github.com/dajiaji/hpke-js\nhttps://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34\n","enisa_id":"EUVD-2025-198319\n","aliases":"GHSA-73g8-5h73-26h4\nCVE-2025-64767\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"eaa3fcee-a9f1-3fe1-931b-274e96ecf620","vulnerability":{"id":"CVE-2025-64767","description":"hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.","datePublished":"Nov 21, 2025, 6:47:19 PM","dateUpdated":"Nov 21, 2025, 7:01:11 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4\nhttps://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf\nhttps://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34\n","enisa_id":"EUVD-2025-198319\n","assigner":"GitHub_M","epss":0.23,"dataProcessed":"Oct 29, 2026, 7:20:03 AM","vulnerabilityProduct":[{"id":"05fe20ae-2237-34b5-950b-edbd2491772d","product":{"name":"hpke-js","vendor":{"name":"dajiaji"}},"product_version":"\u003c 1.7.5"}],"vulnerabilityVendor":[{"id":"e80cf07f-a7bc-3205-8d16-e6f909c0d78a","vendor":{"name":"dajiaji"}}]}}],"enisaIdAdvisory":[]}