{"action":"Upgrade cryptography to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"0"}],"component":"cryptography","cve_ids":["CVE-2020-25659"],"ecosystem":"PyPI","epss":0.02463,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-hggm-jpg3-v476","id":"tcs_01M5KGE7WYDNT2YYWCY2WPHHZ5","modified_at":"2023-11-08T04:03:11.264590Z","published_at":"2021-01-11T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-62","https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b","https://github.com/advisories/GHSA-hggm-jpg3-v476"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-62","url":"https://osv.dev/vulnerability/PYSEC-2021-62"}],"summary":"python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext."}