Apache Commons Codec Blake3 doFinalize is stateless (CVE-2026-119078)
Repeated doFinalize calls without new input return the same bytes, so the documented KDF example derives identical keys.
1 stories, newest first · one card per story
Repeated doFinalize calls without new input return the same bytes, so the documented KDF example derives identical keys.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views