Vulnerabilities in chewkeanho

3 results

CVE-2023-42798HIGHAutomataCI Release Job Can Revert Repo to First CommitEPSS 0.4%CVE-2025-47276HIGHActualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2iEPSS 0.3%CVE-2026-85649HIGH(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root uEPSS 0.2%