tink_java vulnerabilities

CVEs whose affected-version data names the tink_java package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15432Medium· 5.9

2mo ago

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information ho…

▾ Sunlitgoogle · tink_javaEPSS 0.20%via NVD