Read the docs

tink-crypto

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

tink-crypto records in CISA KEV

No tink-crypto vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-71269 CVE-2026-109425 · GHSA-5fgm-q74f-6j8f

Keyset validation bypass in Tink-go handle construction

Priority HIGH 70

Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate() step before constructing a keyset.Handle…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00193 Published 2026-10-12 No fix listed CWE-1286
Open these records in search →