CVE-2025-70050
1 advisory.
PyPI/lesspass CVE-2025-70050: medium 6.5, EPSS 0.17%
An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.6.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-84
- https://github.com/lesspass
- https://gist.github.com/zcxlighthouse/12809648370f0e08d71434ff419df28e
- https://github.com/lesspass/lesspass
CVE-2025-70050 · published · modified · JSON