PyPI/pycryptodomex CVE-2023-52323: medium 5.9, EPSS 0.62%

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

Action: Upgrade pycryptodomex to 3.19.1 or later.

pip install pycryptodomex==3.19.1

Affected

Fixed versions

Sources

• osv: PYSEC-2024-3
• https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst
• https://pypi.org/project/pycryptodomex/#history

CVE-2023-52323 · published 2024-01-05T04:15:00Z · modified 2026-07-07T17:56:21.566071405Z · JSON