KeePass Vulnerability Exposes Master Passwords, Fix on the Way

A vulnerability in the KeePass password manager has been discovered that allows attackers to extract the master password from the application's memory, even when the database is locked. The flaw exists because the software uses a custom password entry box that leaves traces of each character the user types in the memory. The vulnerability impacts the latest version of KeePass, 2.53.1, and as the program is open-source, any project forks are likely affected. A fix for the vulnerability is expected to be released in KeePass version 2.54, which is expected to be released in early June.