CVE-2026-31839

Published: Mar 11, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.

Affected (1)

Products: Striae: Striae

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Striae Striae	From 0.9.22 to 3.0.0

Related CWEs

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (2)

https://github.com/striae-org/striae/releases/tag/v3.0.0

Source: security-advisories@github.com

Release Notes

https://github.com/striae-org/striae/security/advisories/GHSA-mmf8-487q-p45m

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.