I think this is for Apple&#x27;s .keychain files.<p>&quot;Where&#x27;s the vulnerability?&quot; I don&#x27;t think this is a vulnerability at all. As the code at <a href="https:&#x2F;&#x2F;github.com&#x2F;indutny&#x2F;keychair&#x2F;blob&#x2F;master&#x2F;bin&#x2F;keychair" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;indutny&#x2F;keychair&#x2F;blob&#x2F;master&#x2F;bin&#x2F;keychair</a> shows, its use seems to be just decrypting private keys with a passphrase.<p>(Am I the only one who was surprised to see it&#x27;s written in JS...?)