Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/cashu@0.2.3
purl pkg:pypi/cashu@0.2.3
Next non-vulnerable version 0.18.0
Latest non-vulnerable version 0.18.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vs49-tzu4-uqer
Aliases:
CVE-2025-65548
PYSEC-2025-89
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary data.
0.18.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T20:36:48.669986+00:00 Pypa Importer Affected by VCID-vs49-tzu4-uqer https://github.com/pypa/advisory-database/blob/main/vulns/cashu/PYSEC-2025-89.yaml 38.6.0