PyPI/openssl-encrypt CVE-2026-74873: medium, EPSS 0.32%

openssl-encrypt has visible password in process list via --password CLI argument

Action: Upgrade openssl-encrypt to 1.4.0 or later.

pip install openssl-encrypt==1.4.0

Affected

Fixed versions

Sources

• osv: GHSA-h3m5-p59h-x88p
• https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-h3m5-p59h-x88p
• https://github.com/jahlives/openssl_encrypt/commit/e78a3666e4592f3538adaaa6be8f5f04356174db
• https://github.com/jahlives/openssl_encrypt

CVE-2026-74873 · published 2026-03-31T23:42:17Z · modified 2026-09-02T09:10:38.357692437Z · JSON