Description
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pypinksign | <= 0.5.1 | — | GHSA-fxff-wxxv-c2jc |
| PyPI | pypinksign | all versions | — | PYSEC-2023-245 |