Advisories · Technology

CERT/CC cveClient/encrypt-storage.js.

Every CVE that names CERT/CC cveClient/encrypt-storage.js among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35467 CVE record

CVSS 7.5 High

Private Key stored as extractable in browser IndexeDB
- CERT/CC cveClient/encrypt-storage.js
- Hard-coded credentials
Not analysed yet 2 Apr 2026