{"action":"Upgrade rsa to 4.7 or later.","affected":[{"fixed":"4.7","introduced":"2.1"}],"component":"rsa","cve_ids":["CVE-2020-25658"],"ecosystem":"PyPI","epss":0.01651,"exploited":false,"fixed_versions":["4.7"],"ghsa_id":"GHSA-xrx6-fmxq-rjj2","id":"tcs_01M5KG4R4Q66BSX9Y225T70Y6V","modified_at":"2024-10-26T22:49:36.190678Z","published_at":"2021-04-30T17:35:15Z","references":["https://osv.dev/vulnerability/GHSA-xrx6-fmxq-rjj2","https://nvd.nist.gov/vuln/detail/CVE-2020-25658","https://github.com/sybrenstuvel/python-rsa/issues/165","https://github.com/sybrenstuvel/python-rsa/commit/dae8ce0d85478e16f2368b2341632775313d41ed","https://access.redhat.com/security/cve/CVE-2020-25658","https://bugzilla.redhat.com/show_bug.cgi?id=1889972","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658","https://github.com/advisories/GHSA-xrx6-fmxq-rjj2","https://github.com/pypa/advisory-database/tree/main/vulns/rsa/PYSEC-2020-100.yaml","https://github.com/sybrenstuvel/python-rsa","https://access.redhat.com/errata/RHSA-2022:1716","https://access.redhat.com/errata/RHSA-2021:0637","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7","https://access.redhat.com/errata/RHSA-2020:5634"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-xrx6-fmxq-rjj2","url":"https://osv.dev/vulnerability/GHSA-xrx6-fmxq-rjj2"}],"summary":"Timing attacks in python-rsa"}