PyPI/enrocrypt CVE-2021-39182: unknown, EPSS 0.56%
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problem
Action: Upgrade enrocrypt to 1.1.4 or later.
pip install enrocrypt==1.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
Fixed versions
| 1.1.4 |
Sources
- osv: PYSEC-2021-385
- https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce
- https://github.com/Morgan-Phoenix/EnroCrypt/security/advisories/GHSA-35m5-8cvj-8783
CVE-2021-39182 · published · modified · JSON