Most recent entries from all

CVE-2020-25659

Affected: python-cryptography

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

GHSA-hggm-jpg3-v476 — RSA decryption vulnerable to Bleichenbacher timing vulnerability

Affected: PyPI: cryptography

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.

PYSEC-2021-62

Affected: PyPI: cryptography

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.