o
opencryptoki
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 5, 2021 to present
8
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
36/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
0Medium
7Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
1
Most Affected Products
1. Opencryptoki opencryptoki8
2. Opencryptoki Project Opencryptoki4
3. debian/opencryptoki3
4. IBM Cloud Pak for Data System (Yosemite 1.0)1
Recent Vulnerabilities
See more →REDHAT-BUG-2459076
CVSS 4.0medium
Apr 16, 2026🔧 No Patch
CVE-2026-40253
CVSS 6.8medium
openCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c
Apr 16, 2026
REDHAT-BUG-2431909
CVSS 4.0medium
Jan 22, 2026🔧 No Patch
CVE-2026-23893
CVSS 6.8EPSS 0%medium
openCryptoki has improper link resolution before file access (link following)
Jan 22, 2026
CVE-2026-22791
CVSS 6.6EPSS 0%medium
openCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP
Jan 13, 2026
REDHAT-BUG-2260407
CVSS 4.0medium
Jan 25, 2024🔧 No Patch
REDHAT-BUG-1990591
CVSS 4.0medium
Aug 5, 2021🔧 No Patch
USN-8686-1
unknown
openCryptoki vulnerabilities
Nov 9, 2026🔧 No Patch
Monitor opencryptoki in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.