Common Weakness Enumeration

CWE-325 Missing Cryptographic Step

Description

The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-325 ordered by modification date.

15 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-r6fj-869h-4f6q	CVE-2026-48480	MODERATE	maven/io.netty.incubator/netty-incubator-codec-ohttp	OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation	2026-06-23
GHSA-9xg4-qhm4-g43w	CVE-2026-49440	HIGH	-	Deno: Miller-Rabin Primality Test Allows Zero Rounds	2026-06-16
GHSA-w8q8-93cx-6h7r	CVE-2026-4601	HIGH	npm/jsrsasign	jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction	2026-03-29
GHSA-2w8x-224x-785m	CVE-2026-4258	HIGH	npm/sjcl	sjcl is missing point-on-curve validation in sjcl.ecc.basicKey.publicKey	2026-03-25
GHSA-5379-f5hf-w38v	CVE-2026-22863	CRITICAL	-	Deno node:crypto doesn't finalize cipher	2026-01-16
GHSA-wgq8-vr6r-mqxm	CVE-2025-58359	MODERATE	-	frost-core: refresh shares with smaller min_signers will reduce security of group	2025-09-05
GHSA-h63v-hw6g-x8hp	CVE-2024-53441	HIGH	npm/cookie-encrypter	Bit flip attack vulnerability in cookie-encrypter	2024-12-11
GHSA-hhfg-fwrw-87w7	CVE-2024-55655	LOW	pypi/sigstore	sigstore has insufficient validation of integration timestamp during verification	2024-12-11
GHSA-4fjv-pmhg-3rfg	CVE-2020-26244	HIGH	pypi/oic	Multiple cryptographic issues in Python oic	2024-10-07
GHSA-jcp9-796g-pv9p	CVE-2013-5679	LOW	maven/org.owasp.esapi/esapi	Missing Cryptographic Step in OWASP Enterprise Security API for Java	2024-03-20
GHSA-2g56-7jv7-wxxq	CVE-2013-5960	MODERATE	maven/org.owasp.esapi/esapi	Missing Cryptographic Step in OWASP Enterprise Security API for Java	2024-03-05
GHSA-4h44-w6fm-548g	CVE-2020-15086	CRITICAL	-	Potential Remote Code Execution in TYPO3 with mediace extension	2024-02-05
GHSA-mr45-rx8q-wcm9	CVE-2023-46129	HIGH	golang/github.com/nats-io/nats-server/v2 golang/github.com/nats-io/nkeys	xkeys seal encryption used fixed key for all encryption	2023-10-31
GHSA-7qcx-4p32-qcmx	CVE-2022-29229	MODERATE	npm/cassproject	Missing Cryptographic Step in cassproject	2022-06-08
GHSA-m5vr-3m74-jwxp	CVE-2020-15098	HIGH	-	Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS	2021-11-19