CVE-2025-64767

hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34
https://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf
https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) hpke-js es un módulo de Cifrado Híbrido de Clave Pública (HPKE) construido sobre la API de Criptografía Web. Versiones anteriores a la versión 1.7.5, la API pública Seal() de SenderContext tiene una condición de carrera que permite que el mismo nonce AEAD sea reutilizado para múltiples llamadas a Seal(). Esto puede llevar a la pérdida completa de la Confidencialidad y la Integridad de los mensajes producidos. Este problema ha sido parcheado en la versión 1.7.5.

Information

Published : 2025-11-21 19:16

Updated : 2026-10-18 20:10

NVD link : CVE-2025-64767

Mitre link : CVE-2025-64767

CVE.ORG link : CVE-2025-64767

JSON object : View

Products Affected

No product.

CWE

CWE-323

Reusing a Nonce, Key Pair in Encryption

{"id": "CVE-2025-64767", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64767", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-21T18:59:55.477261Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "dajiaji", "product": "hpke-js", "versions": [{"status": "affected", "version": "< 1.7.5"}]}]}], "published": "2025-11-21T19:16:03.497", "references": [{"url": "https://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34", "source": "security-advisories@github.com"}, {"url": "https://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf", "source": "security-advisories@github.com"}, {"url": "https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-323"}]}], "descriptions": [{"lang": "en", "value": "hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5."}, {"lang": "es", "value": "hpke-js es un m\u00f3dulo de Cifrado H\u00edbrido de Clave P\u00fablica (HPKE) construido sobre la API de Criptograf\u00eda Web. Versiones anteriores a la versi\u00f3n 1.7.5, la API p\u00fablica Seal() de SenderContext tiene una condici\u00f3n de carrera que permite que el mismo nonce AEAD sea reutilizado para m\u00faltiples llamadas a Seal(). Esto puede llevar a la p\u00e9rdida completa de la Confidencialidad y la Integridad de los mensajes producidos. Este problema ha sido parcheado en la versi\u00f3n 1.7.5."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "security-advisories@github.com"}