Enpass 6 is affected by Magellan Vulnerability

[Binh Truong]

Hi Enpass team,

Currently there is the Magellan Vulnerability on SQLLite. Enpass use SQLCipher engine and SQLCipher use old version of SQLLite (under 3.26). So I wonder if encrypted data of Enpass is still safe with this Magellan Vulnerability?

Thanks,

Binh

[Vinod Kumar]

Hi @Binh Truong,

This bug is relevant to apps where an attacker can execute arbitrary SQL, such as in web browsers using WebSQL. We have our own sql queries and and do not accept sql from arbitrary sources.  So, your data is safe with Enpass.

Cheers,

 

[Binh Truong]

Thank for your sharing.