Hi Enpass team,

Currently there is the Magellan Vulnerability on SQLLite. Enpass use SQLCipher engine and SQLCipher use old version of SQLLite (under 3.26). So I wonder if encrypted data of Enpass is still safe with this Magellan Vulnerability?

Thanks,

Binh

Hi @Binh Truong,

This bug is relevant to apps where an attacker can execute arbitrary SQL, such as in web browsers using WebSQL. We have our own sql queries and and do not accept sql from arbitrary sources.  So, your data is safe with Enpass.

Cheers,

 

Thank for your sharing.