Description
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | upydev | <= 0.4.3 | — | GHSA-qc4j-hrj6-cppf |
High · 7.5
CVE-2023-48051
EUVD-2023-0302GHSA-qc4j-hrj6-cppfPYSEC-2023-302
upydev has weak encryption padding
Published Nov 20, 2023 · Updated Aug 2, 2024 · Assigned by mitre