# New vulnerability detected in openssl

**URL:** <https://discuss.zetetic.net/t/new-vulnerability-detected-in-openssl/6877>\
**Category:** SQLCipher\
**Created:** [March 26, 2025, 6:30am UTC](https://discuss.zetetic.net/t/new-vulnerability-detected-in-openssl/6877 "2025-03-26T06:30:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@Fred](https://discuss.zetetic.net/u/Fred)\
**Post date:** [March 26, 2025, 6:31am UTC](https://discuss.zetetic.net/t/new-vulnerability-detected-in-openssl/6877/1 "2025-03-26T06:31:00Z")

</div>

Hi,  
Our scan tool reports vulnerabilities CVE-2025-0306 and CVE-2024-13176 in openssl used by sqlcipher 4.6.1.  
Does these vulnerabilities affect net.zetetic:sqlcipher-android?

Thanks,  
Fred

---

<div class="post-metadata">

**Author:** ![developernotes](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/developernotes/32/1309_2.png) [@developernotes](https://discuss.zetetic.net/u/developernotes)\
**Post date:** [March 26, 2025, 12:40pm UTC](https://discuss.zetetic.net/t/new-vulnerability-detected-in-openssl/6877/2 "2025-03-26T12:40:11Z")

</div>

Hello @Fred,

SQLCipher does not use the Elliptic Curve Digital Signature Algorithm (ECDSA), or the Ruby interpreter so it not impacted by CVE-2025-0306 or CVE-2024-13176. Please note, the latest version of SQLCipher is 4.7.0 \[1\] so you may wish to schedule an update.

* * *

1. [SQLCipher 4.7.0 Release | Zetetic](https://www.zetetic.net/blog/2025/03/25/sqlcipher-4.7.0-release/)