VDB
Sign up
HIGH7.5

PYSEC-2023-302

Details

An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/upydev
Introduced in: 0

No fixed version published yet for upydev (pip). Pin to a known-safe version or switch to an alternative.

References