CVE-2021-39182
2 advisories.
PyPI/enrocrypt CVE-2021-39182: high 7.5, EPSS 0.56%
Improper hashing in enrocrypt
Action: Upgrade enrocrypt to 1.1.4 or later.
pip install enrocrypt==1.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
Fixed versions
| 1.1.4 |
Sources
- osv: GHSA-35m5-8cvj-8783
- https://github.com/Morgan-Phoenix/EnroCrypt/security/advisories/GHSA-35m5-8cvj-8783
- https://nvd.nist.gov/vuln/detail/CVE-2021-39182
- https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce
- https://github.com/Morgan-Phoenix/EnroCrypt
- https://github.com/pypa/advisory-database/tree/main/vulns/enrocrypt/PYSEC-2021-385.yaml
CVE-2021-39182 · published · modified · JSON
PyPI/enrocrypt CVE-2021-39182: unknown, EPSS 0.56%
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problem
Action: Upgrade enrocrypt to 1.1.4 or later.
pip install enrocrypt==1.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
Fixed versions
| 1.1.4 |
Sources
- osv: PYSEC-2021-385
- https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce
- https://github.com/Morgan-Phoenix/EnroCrypt/security/advisories/GHSA-35m5-8cvj-8783
CVE-2021-39182 · published · modified · JSON