cloak
Elixir encryption library
Activity
- Latest release
- 2y ago
- Total releases
- 30
- Cadence
- ~44 days
- Last 12 months
- 0
Details
- License
- MIT
- First release
- Sep 16, 2015
| Version | Released | |
|---|---|---|
1.1.4
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.1.3
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.1.2
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.1.1
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.1.0
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.0.3
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.0.2
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.0.1
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.0.0
major
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
1.0.0-alpha.0
pre
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.9.2
patch
2 CVEs
CVE-2026-94206
EEF-CVE-2026-94206
Oct 06, 2026
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Medium
Network
Low
None
None
SummaryUse of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The This issue affects cloak_ecto: from 1.0.0-alpha.0 onward; cloak: from 0.7.0 before 1.0.0-alpha.0. Proof of concept
ImpactAn attacker who obtains a database dump and the PBKDF2 secret can recover hashed values with low entropy, such as email addresses, by offline guessing at a cost far below what the configuration promises. WorkaroundsOverride Affected versions
0.7.0
0.8.0
0.9.0
0.9.1
0.9.2
Fixed in
1.0.0-alpha.0
References
Updated Oct 06, 2026 · Source: OSV.dev
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.9.1
patch
2 CVEs
CVE-2026-94206
EEF-CVE-2026-94206
Oct 06, 2026
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Medium
Network
Low
None
None
SummaryUse of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The This issue affects cloak_ecto: from 1.0.0-alpha.0 onward; cloak: from 0.7.0 before 1.0.0-alpha.0. Proof of concept
ImpactAn attacker who obtains a database dump and the PBKDF2 secret can recover hashed values with low entropy, such as email addresses, by offline guessing at a cost far below what the configuration promises. WorkaroundsOverride Affected versions
0.7.0
0.8.0
0.9.0
0.9.1
0.9.2
Fixed in
1.0.0-alpha.0
References
Updated Oct 06, 2026 · Source: OSV.dev
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.9.0
minor
2 CVEs
CVE-2026-94206
EEF-CVE-2026-94206
Oct 06, 2026
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Medium
Network
Low
None
None
SummaryUse of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The This issue affects cloak_ecto: from 1.0.0-alpha.0 onward; cloak: from 0.7.0 before 1.0.0-alpha.0. Proof of concept
ImpactAn attacker who obtains a database dump and the PBKDF2 secret can recover hashed values with low entropy, such as email addresses, by offline guessing at a cost far below what the configuration promises. WorkaroundsOverride Affected versions
0.7.0
0.8.0
0.9.0
0.9.1
0.9.2
Fixed in
1.0.0-alpha.0
References
Updated Oct 06, 2026 · Source: OSV.dev
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.8.0
minor
2 CVEs
CVE-2026-94206
EEF-CVE-2026-94206
Oct 06, 2026
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Medium
Network
Low
None
None
SummaryUse of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The This issue affects cloak_ecto: from 1.0.0-alpha.0 onward; cloak: from 0.7.0 before 1.0.0-alpha.0. Proof of concept
ImpactAn attacker who obtains a database dump and the PBKDF2 secret can recover hashed values with low entropy, such as email addresses, by offline guessing at a cost far below what the configuration promises. WorkaroundsOverride Affected versions
0.7.0
0.8.0
0.9.0
0.9.1
0.9.2
Fixed in
1.0.0-alpha.0
References
Updated Oct 06, 2026 · Source: OSV.dev
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.7.0
minor
2 CVEs
CVE-2026-94206
EEF-CVE-2026-94206
Oct 06, 2026
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Medium
Network
Low
None
None
SummaryUse of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The This issue affects cloak_ecto: from 1.0.0-alpha.0 onward; cloak: from 0.7.0 before 1.0.0-alpha.0. Proof of concept
ImpactAn attacker who obtains a database dump and the PBKDF2 secret can recover hashed values with low entropy, such as email addresses, by offline guessing at a cost far below what the configuration promises. WorkaroundsOverride Affected versions
0.7.0
0.8.0
0.9.0
0.9.1
0.9.2
Fixed in
1.0.0-alpha.0
References
Updated Oct 06, 2026 · Source: OSV.dev
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.7.0-alpha.2
pre
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.7.0-alpha.1
pre
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.6.2
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.6.1
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.6.0
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.5.0
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.4.0
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.3.3
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.3.2
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.3.1
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.2.2
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.2.1
patch
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.2.0
minor
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.1.0
initial
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev | ||
0.1.0-pre
pre
1 CVE
CVE-2026-95105
EEF-CVE-2026-95105
Oct 06, 2026
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
High
Network
Low
None
None
SummaryReliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.
This issue affects cloak: from 0.1.0-pre onward. Proof of concept
ImpactAn attacker who can write to the encrypted store can set encrypted fields with known or guessable contents, such as roles, flags, or fixed-format records, to values of their choice without the key. The application decrypts and trusts the forged value. WorkaroundsConfigure the vault with Affected versions
0.1.0
0.1.0-pre
0.2.0
0.2.1
0.2.2
0.3.1
0.3.2
0.3.3
0.4.0
0.5.0
0.6.0
0.6.1
+ 18 more Show less
0.6.2
0.7.0
0.7.0-alpha.1
0.7.0-alpha.2
0.8.0
0.9.0
0.9.1
0.9.2
1.0.0
1.0.0-alpha.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
References Updated Oct 06, 2026 · Source: OSV.dev |