CVE-2026-81693
1 advisory.
PyPI/openssl-encrypt CVE-2026-81693: unknown, EPSS 0.49%
openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger un
Action: Upgrade openssl-encrypt to 1.4.9 or later.
pip install openssl-encrypt==1.4.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.9 | - |
Fixed versions
| 1.4.9 |
Sources
- osv: PYSEC-2026-3798
- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-r23m-gf2m-8www
- https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-qr-total-field
CVE-2026-81693 · published · modified · JSON