{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.7.11"}],"component":"react-native-keys","cve_ids":["CVE-2025-45001"],"ecosystem":"npm","epss":0.00202,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fj44-h6xw-896g","id":"tcs_01M5KFNMZWE93DGZ8M7WMJ5HKM","modified_at":"2025-07-02T20:29:47.356162Z","published_at":"2025-06-09T18:32:16Z","references":["https://osv.dev/vulnerability/GHSA-fj44-h6xw-896g","https://nvd.nist.gov/vuln/detail/CVE-2025-45001","https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5","https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001","https://github.com/numandev1/react-native-keys"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fj44-h6xw-896g","url":"https://osv.dev/vulnerability/GHSA-fj44-h6xw-896g"}],"summary":"react-native-keys insecurely stores encryption cipher and Base64 chunks"}