CVE-2025-64767 hpke-js reuses AEAD nonces
A race condition in the Seal API allows AEAD nonce reuse, compromising message confidentiality and integrity in the hpke-js library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-64767?
CVE-2025-64767 is a critical vulnerability in dajiaji hpke-js, published on 21 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5.
Weakness: CWE-323
Which versions are affected by CVE-2025-64767?
2 open source packages ship an affected version, including @hpke/core.
| Package | Affected | Fixed in |
|---|---|---|
@hpke/core npm | All versions | 1.7.5 |
@hpke/core npm | All versions | 1.7.5 |
How do I fix CVE-2025-64767?
Upgrade @hpke/core to 1.7.5 or later.
Is CVE-2025-64767 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-64767 exists.
Sources
Also known as GHSA-73g8-5h73-26h4.