ChewKeanHo vulnerabilities
We track 3 vulnerabilities in ChewKeanHo products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
Latest ChewKeanHo vulnerabilities
- 7.9 High severity
software-actualizer: Unchecked Return Value
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hash
- 7.5 High severity
Actualizer: Use of Weak Hash
Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS). Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher
- 9.1 Critical severity
AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI…
AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a worka