PatchTheCVE: charmhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-33734: Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows athttps://patchthecve.com/cve/CVE-2022-33734.htmlhttps://patchthecve.com/cve/CVE-2022-33734.htmlWed, 17 Jun 2026 04:49:20 +0000MEDIUM 6.2: Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.CVE-2022-33733: Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attachttps://patchthecve.com/cve/CVE-2022-33733.htmlhttps://patchthecve.com/cve/CVE-2022-33733.htmlWed, 17 Jun 2026 04:49:20 +0000MEDIUM 6.2: Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.CVE-2022-29180: A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to acceshttps://patchthecve.com/cve/CVE-2022-29180.htmlhttps://patchthecve.com/cve/CVE-2022-29180.htmlWed, 17 Jun 2026 04:39:45 +0000MEDIUM 5.9: A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v0.12.1). We recommend that all users runnCVE-2021-37588: In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.https://patchthecve.com/cve/CVE-2021-37588.htmlhttps://patchthecve.com/cve/CVE-2021-37588.htmlWed, 17 Jun 2026 04:00:47 +0000MEDIUM 5.9: In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.CVE-2021-37587: In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.https://patchthecve.com/cve/CVE-2021-37587.htmlhttps://patchthecve.com/cve/CVE-2021-37587.htmlWed, 17 Jun 2026 04:00:47 +0000MEDIUM 6.5: In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.