Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

rsa

3 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high
Registry
PyPI

Advisories 3

  • It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.

    Affected: from 2.1, fixed in 4.7.

  • Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext.

    Affected: fixed in 4.1.

  • The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public…

    Affected: fixed in 3.3.