danielberkompas cloak
- CVE-2026-94206 Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds 0.2%
- CVE-2026-95105 Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping 0.1%