Striae vulnerabilities
Published CVEs affecting Striae products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-31839
High · 7.5
CWE-354 Mar 11, 2026
Striae has a hash validation utility vulnerability
Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.