# python-gnupg (PyPI) vulnerabilities 5 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pypi.org/project/python-gnupg/ ## Advisories (5) ### [CVE-2019-6690](https://cve.now/CVE-2019-6690): python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. - Severity: Unrated - Published: Mar 17, 2019 - Affected: fixed in 0.4.4. ### [CVE-2014-1929](https://cve.now/CVE-2014-1929): python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection… - Severity: Unrated - Published: Oct 25, 2014 - Affected: from 0.3.5, fixed in 0.3.7. ### [CVE-2014-1928](https://cve.now/CVE-2014-1928): The shell\_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute… - Severity: Unrated - Published: Oct 25, 2014 - Affected: fixed in 0.3.6; from 0.3.5, fixed in 0.3.6. ### [CVE-2014-1927](https://cve.now/CVE-2014-1927): The shell\_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute… - Severity: Unrated - Published: Oct 25, 2014 - Affected: from 0.3.5, fixed in 0.3.6. ### [CVE-2013-7323](https://cve.now/CVE-2013-7323): python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. - Severity: Unrated - Published: Jun 9, 2014 - Affected: fixed in 0.3.5; fixed in 0.3.7. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/python-gnupg Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.