CVE record · 1 source
CVE-2026-119078
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that…
- Vendor
- Apache Software Foundation
- Product
- Apache Commons Codec
- Weakness
- CWE-684, CWE-1068
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that…
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. In fact, doFinalize does not change the…