CVE-2021-37587: Jhu Charm

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.

Affected products

• Jhu Charm: version 0.43 only

Published 2021-07-30. Last modified 2026-06-17.