CVE-2021-37588: Jhu Charm

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.

Affected products

• Jhu Charm: version 0.43 only

Published 2021-07-30. Last modified 2026-06-17.