CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2025-45001
High (7.5) in numan react-native-keys. EPSS 0.2% chance of exploitation in the next 30 days.
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
- CWE
- CWE-312
- Published
- Modified
- Record from
- the NVD, synced
Affected
- numan:react-native-keys
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fj44-h6xw-896g | npm | react-native-keys | <=0.7.11 | no fix published |