Rnp vulnerabilities

1 known vulnerability in Rnp from Ribose. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  RNP: Use of Insufficiently Random Values

  CVE-2025-13470Nov 21, 2025Ribose

  In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using