CVE-2025-64767
Critical · 9.1CVSS
9.1
EPSS
0.2%
Published
Nov 21, 2025
CISA due date
—
The record
hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @hpke/core | 0 | 1.7.5 |
Related vulnerabilities
- GHSA-73g8-5h73-26h4 @hpke/core reuses AEAD nonces Same vulnerability
- CVE-2026-50577 ePA 3.x Integration implements the authorization workflow and writes Medical Information… CWE-323
- CVE-2026-17578 Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation… CWE-323
- CVE-2026-21383 Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping… CWE-323
- CVE-2026-56369 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the… CWE-323
- CVE-2026-55967 AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64… CWE-323
- CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to… CWE-323
- CVE-2026-49952 Discuz! CWE-323