PyPI/wolfcrypt CVE-2019-13628: medium 4.7, EPSS 0.36%
wolfCrypt leaks cryptographic information via timing side channel
Action: Upgrade wolfcrypt to 4.1.0 or later.
pip install wolfcrypt==4.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.0 | - |
Fixed versions
| 4.1.0 |
Sources
- osv: PYSEC-2026-1066
- https://nvd.nist.gov/vuln/detail/CVE-2019-13628
- https://eprint.iacr.org/2011/232.pdf
- https://github.com/wolfSSL/wolfcrypt-py
- https://minerva.crocs.fi.muni.cz
- https://tches.iacr.org/index.php/TCHES/article/view/7337
- http://www.openwall.com/lists/oss-security/2019/10/02/2
- https://pypi.org/project/wolfcrypt
- https://github.com/advisories/GHSA-q95h-vc86-hv77
CVE-2019-13628 · published · modified · JSON