GitHub Advisoryadvisory · PyPI

GHSA-258h-f687-4226 PheonixAppAPI has visible Encoding Maps

MEDIUM Published 2024-07-31 Modified 2024-11-12 Official page ↗
Aliases
CVE-2024-41951
Ecosystem
PyPI
Packages
PheonixAppAPI
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-323
Reviewed
2024-07-31

Affected packages

• PyPI PheonixAppAPI: < 0.2.5 → fixed in 0.2.5

Description

Impact This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc. The issue is that the map of encoding/decoding languages are visible in code. Patches The Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version. For 0.2.5 version users Please run the post_install.py file inside the Scripts folder after downloading from pip. Workarounds There is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues. References There are currently no references to this problem. NOTE: If you get a error regarding a function like -> get_key() or something like that, please re-run the file post_install.py inside Scripts folder

Related

Alias · CVE (1)

  • CVE-2024-41951 Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. vulnerability

Weakness · CWE (1)

  • CWE-323 Reusing a Nonce, Key Pair in Encryption weakness

References