~ / search / GHSA-fj44-h6xw-896g

GHSA-fj44-h6xw-896g

react-native-keys insecurely stores encryption cipher and Base64 chunks

Source: GitHub Advisory Database (reviewed) High CVE-2025-45001

Packages

EcosystemPackageAffectedFixed in
npm react-native-keys <= 0.7.11 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

References

External links from the advisory. They lead to third-party sites.