PyPI/pycryptodome CVE-2023-52323: medium 5.3, EPSS 0.62%

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

Action: Upgrade pycryptodome to 3.19.1 or later.

pip install pycryptodome==3.19.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1811
• https://nvd.nist.gov/vuln/detail/CVE-2023-52323
• https://github.com/Legrandin/pycryptodome/commit/0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd
• https://github.com/Legrandin/pycryptodome
• https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst
• https://github.com/pypa/advisory-database/tree/main/vulns/pycryptodomex/PYSEC-2024-3.yaml
• https://pypi.org/project/pycryptodomex/#history
• https://pypi.org/project/pycryptodome
• https://github.com/advisories/GHSA-j225-cvw7-qrx7

CVE-2023-52323 · published 2026-07-07T11:45:29.466835Z · modified 2026-07-07T17:56:21.566071405Z · JSON