{"action":"Upgrade cryptography to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"3.1"}],"component":"cryptography","cve_ids":["CVE-2020-36242"],"ecosystem":"PyPI","epss":0.06799,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-rhm9-p9w5-fwm7","id":"tcs_01M5KFY46ESD3QZT8MRZ31T34J","modified_at":"2025-02-15T05:29:30.639484Z","published_at":"2021-02-10T01:32:27Z","references":["https://osv.dev/vulnerability/GHSA-rhm9-p9w5-fwm7","https://github.com/pyca/cryptography/security/advisories/GHSA-rhm9-p9w5-fwm7","https://nvd.nist.gov/vuln/detail/CVE-2020-36242","https://github.com/pyca/cryptography/issues/5615","https://github.com/pyca/cryptography/commit/82b6ce28389f0a317bc55ba2091a74b346db7cae","https://github.com/advisories/GHSA-rhm9-p9w5-fwm7","https://github.com/pyca/cryptography","https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst","https://github.com/pyca/cryptography/compare/3.3.1...3.3.2","https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-63.yaml","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-rhm9-p9w5-fwm7","url":"https://osv.dev/vulnerability/GHSA-rhm9-p9w5-fwm7"}],"summary":"PyCA Cryptography symmetrically encrypting large values can lead to integer overflow"}