CVE-2022-32096: Rhonabwy Project Rhonabwy

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.

Affected products

• Rhonabwy Project Rhonabwy: before 1.1.5 (fixed in 1.1.5)

Published 2022-07-13. Last modified 2026-06-17.