Google Tink Java
2 CVEs affecting Google Tink Java. Latest disclosed: 2026-07-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15432 | Medium | 5.9 | 2026-07-21 | When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attack… |
CVE-2020-8929 | Medium | 5.3 | 2020-10-19 | A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext… |