Tink Java (Google) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2026-07-21. Vendor: Google.

CVEs of Tink Java

• CVE-2026-15432 - CVSS 8.2 (high), 2026-07-21: When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an…
• CVE-2020-8929 - CVSS 5.3 (medium), 2020-10-19: A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a…