{"action":"Upgrade tlslite-ng to 0.7.6 or later.","affected":[{"fixed":"0.7.6","introduced":"0"}],"component":"tlslite-ng","cve_ids":["CVE-2020-26263"],"ecosystem":"PyPI","epss":0.01523,"exploited":false,"fixed_versions":["0.7.6"],"ghsa_id":"GHSA-wvcv-832q-fjg7","id":"tcs_01M5KG9HTX5X3B44HAXD61DF4T","modified_at":"2023-11-08T04:03:16.868623Z","published_at":"2020-12-21T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-143","https://pypi.org/project/tlslite-ng/","https://github.com/tlsfuzzer/tlslite-ng/pull/439","https://github.com/tlsfuzzer/tlslite-ng/pull/438","https://github.com/tlsfuzzer/tlslite-ng/commit/c28d6d387bba59d8bd5cb3ba15edc42edf54b368","https://github.com/tlsfuzzer/tlslite-ng/security/advisories/GHSA-wvcv-832q-fjg7","https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-143","url":"https://osv.dev/vulnerability/PYSEC-2020-143"}],"summary":"tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding ch"}