GHSA-rhrf-cx66-4xf3
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 12, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.