CVE-2022-35143: Raneto Project Raneto

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.

Affected products

• Raneto Project Raneto: before 0.17.1 (fixed in 0.17.1)

Published 2022-08-04. Last modified 2026-06-17.