PYSEC-2023-245

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/pypinksign/PYSEC-2023-245.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2023-245

Aliases

Published

2023-11-16T18:15:00Z

Modified

2025-09-19T04:22:12.586110Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.

References

Affected packages

PyPI / pypinksign

Package

Name: pypinksign; View open source insights on deps.dev
Purl: pkg:pypi/pypinksign

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.1

0.1.1

0.2

0.2.1

0.2.2

0.2.3

0.3

0.4

0.4.1

0.4.2

0.4.3

0.4.4

0.4.5

0.5.0

0.5.1

0.5.2

0.5.3

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/pypinksign/PYSEC-2023-245.yaml"