GHSA-67fj-6w6m-w5j8
Reversible One-Way Hash in io.github.javaezlib:JavaEZ
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.github.javaezlib:JavaEZ | >= 1.6, < 1.7 | 1.7 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
This weakness allows the force decryption of locked text by hackers. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. Upgrading to 1.7 is advised.
### Patches
The vulnerability has been patched in release 1.7.
### Workarounds
Currently there is no way to fix the issue without upgrading.
### References
[CWE-327](https://cwe.mitre.org/data/definitions/327.html)
[CWE-328](https://cwe.mitre.org/data/definitions/328.html)
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [our issue tracker](http://github.com/JavaEZLib/JavaEZ/issues)
* Email us at [[email protected]](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.