Executive brief
EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve
Affected products
- Go github.com/lf-edge/eve
Junglewise Threat Intelligence
CVE-2023-43637: GO-2026-4436 - EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve
CVE-2023-43637 · Severity: low · CVSS 3.1 · Published 2026-02-17
Technologies: github.com/lf-edge/eve (Go). Vendors: Go.
Related threats
- GO-2026-4435 - EVE Doesn't Protect Rootfs in github.com/lf-edge/eve
- GO-2026-4434 - EVE Seals Vault Key With SHA1 PCRs in github.com/lf-edge/eve
- GO-2026-4432 - EVE Doesn't Protect Config Partition with Measured Boot in github.com/lf-edge/eve
- GO-2026-4422 - EVE Freely Allocates Buffer on The Stack With Data From Socket in github.com/lf-edge/eve
- GO-2026-4430 - EVE Doesn't Measure Config Partition From 2 Fronts in github.com/lf-edge/eve