Skip to content
OpenAdvisories

Package · PyPI

rfc3161-client

2 known vulnerabilities.

2 results · Feed

  • Medium 6.2

    Improper Certificate Validation in rfc3161-client

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Aut…

  • Critical 9.3

    rfc3161-client has insufficient verification for timestamp response signatures

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR…