PyPI/azure-storage-queue CVE-2022-30187: medium 4.7, EPSS 0.53%

Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

Action: Upgrade azure-storage-queue to 12.4.0 or later.

pip install azure-storage-queue==12.4.0

Affected

Fixed versions

Sources

• osv: GHSA-64x4-9hc6-r2h6
• https://github.com/google/security-research/security/advisories/GHSA-6m8q-r22q-vfxh
• https://nvd.nist.gov/vuln/detail/CVE-2022-30187
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30187

CVE-2022-30187 · published 2022-07-13T00:00:39Z · modified 2026-07-13T16:43:23.967166870Z · JSON