PyPI/azure-storage-blob CVE-2022-30187: medium 4.7, EPSS 0.53%
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Action: Upgrade azure-storage-blob to 12.13.0 or later.
pip install azure-storage-blob==12.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.13.0 | - |
Fixed versions
| 12.13.0 |
Sources
- osv: GHSA-64x4-9hc6-r2h6#PyPI/azure-storage-blob
- https://github.com/google/security-research/security/advisories/GHSA-6m8q-r22q-vfxh
- https://nvd.nist.gov/vuln/detail/CVE-2022-30187
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30187
CVE-2022-30187 · published · modified · JSON