New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Key are loaded from keyring without any sanitization check #7

Open

endorama opened this issue May 17, 2019 · 0 comments

Labels

good first issue

Owner

endorama commented May 17, 2019

Currently keys are retrieved and used from keyring without any validation.

This could pose an issue if the key get edited maliciously in the keyring.

Considering low priority, as if an attacker is able to change your keyring arbitrarily is able to steal all secrets anyway.

endorama added bug good first issue labels

endorama removed the bug label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment