GitHub Advisoryadvisory · PyPI

GHSA-qc4j-hrj6-cppf upydev has weak encryption padding

HIGH Published 2023-11-21 Modified 2024-11-22 Official page ↗

Aliases: CVE-2023-48051
Ecosystem: PyPI
Packages: upydev
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-326
Reviewed: 2023-11-29

Affected packages

• PyPI upydev: <= 0.4.3 (no fix yet)

Description

An issue in `/upydev/keygen.py` in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.

Related

Alias · CVE (1)

CVE-2023-48051 An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding. vulnerability

Weakness · CWE (1)

CWE-326 Inadequate Encryption Strength weakness

References