o
opencryptoki project
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 15, 2011 to present
7
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
45/100
medium
Severity Distribution
Critical
0High
0Medium
6Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
1
2
Infoleak
1
Most Affected Products
1. Opencryptoki Project Opencryptoki19
2. debian/opencryptoki7
3. Opencryptoki opencryptoki3
4. redhat Enterprise Linux2
5. IBM Cloud Pak for Data System (Yosemite 1.0)1
Recent Vulnerabilities
See more →CVE-2026-40253
CVSS 6.8medium
openCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c
Apr 16, 2026
CVE-2026-23893
CVSS 6.8EPSS 0%medium
openCryptoki has improper link resolution before file access (link following)
Jan 22, 2026
CVE-2026-22791
CVSS 6.6EPSS 0%medium
openCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP
Jan 13, 2026
CVE-2024-0914
CVSS 5.9medium
Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
Jan 25, 2024
CVE-2021-3798
CVSS 5.5medium
Aug 5, 2021
CVE-2012-4455
CVSS 6.2medium
Oct 10, 2012🔧 No Patch
CVE-2012-4454
CVSS 2.9low
Aug 15, 2011🔧 No Patch
Monitor opencryptoki project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.