Skip to main content

New research: Apex vs Claude Code Security vs Codex Security on the same codebase.

Vulnerability disclosure

Short X-Wing keys trigger an out-of-bounds read

CVE-2026-28815

Affected product
swift-crypto
Severity
High
CVSS
7.5
Weakness
CWE-125
Published

Disclosure summary

CVE-2026-28815 is a high-severity CWE-125 vulnerability in swift-crypto. Short X-Wing keys trigger an out-of-bounds read. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.

Verification standard

Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.