CVE-2026-35467
Published
CVSS v3
7.5
HIGH
CVSS v2
N/A
Affected
1
PROJECT
Description
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.
A client and library to cve-services 2.x to provide CVE management for CNA and CERTs
GitHub