CVE-2021-4286
2 advisories.
PyPI/srp CVE-2021-4286: high 7.5, EPSS 0.74%
cocagne pysrp vulnerable to side channel leaks
Action: Upgrade srp to 1.0.17 or later.
pip install srp==1.0.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.17 | - |
Fixed versions
| 1.0.17 |
Sources
- osv: GHSA-xmc3-9m9j-w9x4
- https://nvd.nist.gov/vuln/detail/CVE-2021-4286
- https://github.com/cocagne/pysrp/pull/43
- https://github.com/cocagne/pysrp/commit/dba52642f5e95d3da7af1780561213ee6053195f
- https://github.com/cocagne/pysrp
- https://github.com/cocagne/pysrp/releases/tag/1.0.17
- https://github.com/pypa/advisory-database/tree/main/vulns/srp/PYSEC-2022-43014.yaml
- https://vuldb.com/?ctiid.216875
- https://vuldb.com/?id.216875
CVE-2021-4286 · published · modified · JSON
PyPI/srp CVE-2021-4286: unknown, EPSS 0.74%
A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to inf
Action: Upgrade srp to 1.0.17 or later.
pip install srp==1.0.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.17 | - |
Fixed versions
| 1.0.17 |
Sources
- osv: PYSEC-2022-43014
- https://vuldb.com/?id.216875
- https://vuldb.com/?ctiid.216875
- https://github.com/cocagne/pysrp/commit/dba52642f5e95d3da7af1780561213ee6053195f
- https://github.com/cocagne/pysrp/releases/tag/1.0.17
- https://github.com/cocagne/pysrp/pull/43
- https://github.com/advisories/GHSA-xmc3-9m9j-w9x4
CVE-2021-4286 · published · modified · JSON