PYSEC-2026-1811
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/pycryptodome/PYSEC-2026-1811.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2026-1811
- Aliases
- Published
- 2026-07-07T11:45:29.466835Z
- Modified
- 2026-07-07T17:57:05.720661237Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
- Details
-
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2023-52323
- https://github.com/Legrandin/pycryptodome/commit/0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd
- https://github.com/Legrandin/pycryptodome
- https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst
- https://github.com/pypa/advisory-database/tree/main/vulns/pycryptodomex/PYSEC-2024-3.yaml
- https://pypi.org/project/pycryptodomex/#history
- https://pypi.org/project/pycryptodome
- https://github.com/advisories/GHSA-j225-cvw7-qrx7
Affected packages
PyPI / pycryptodome
Package
- Name
- pycryptodome
- View open source insights on deps.dev
- Purl
- pkg:pypi/pycryptodome
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.19.1
Affected versions
3.*
3.0rc1
3.0
3.1
3.2
3.2.1
3.3
3.3.1
3.4
3.4.3
3.4.4
3.4.5
3.4.6
3.4.7
3.4.8
3.4.9
3.4.11
3.5.0
3.5.1
3.6.0
3.6.1
3.6.3
3.6.4
3.6.5
3.6.6
3.7.0
3.7.1
3.7.2
3.7.3
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.6
3.9.7
3.9.8
3.9.9
3.10.1
3.10.3
3.10.4
3.11.0
3.12.0
3.13.0
3.14.0
3.14.1
3.15.0
3.16.0
3.17
3.18.0
3.19.0