VDB
GO-2026-4436
GO-2026-4436
PUBLISHED
EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | lf-edge/eve | 0, 0 |
Timeline
- Feb 17, 2026 CVE Published
- Feb 19, 2026 CVE Updated
- May 1, 2026 Security Advisory
References
- https://github.com/lf-edge/eve/security/advisories/GHSA-g7vp-j25f-h34p advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-43637 advisory
- https://asrg.io/security-advisories/cve-2023-43637 url
- https://asrg.io/security-advisories/vault-key-partially-predetermined url
- https://github.com/lf-edge/eve/commit/c0c966dc31e2ed9aafc155e6be646adb14756c01 fix