Elixir encryption library
Current section
2 Advisories
Jump to
Current section
2 Advisories
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-94206.html
- https://github.com/danielberkompas/cloak/commit/681c9702b7cd9afe0e5a840751ab009f550c69a9
- https://github.com/danielberkompas/cloak/commit/8699e6417a162c39d9f0ef63511bd23d3f38d1d2
- https://github.com/danielberkompas/cloak_ecto/commit/a8fa1642b02f1c445a1ee8794c9095eb0921f8f3
- https://hex.pm/packages/cloak
- https://hex.pm/packages/cloak_ecto
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
Affected Versions
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
3 722 328
yesterday
18 382
last 7 days
99 230
all time
8 632 400