Search for packages
| purl | pkg:pypi/python-gnupg@0.3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2upe-cwee-bbhg
Aliases: PYSEC-2019-45 |
python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component. |
Affected by 0 other vulnerabilities. |
|
VCID-cjka-q519-e3d2
Aliases: CVE-2013-7323 GHSA-c2fx-8r76-gh36 PYSEC-2014-89 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-dqa1-9c5h-vyb5
Aliases: CVE-2014-1929 GHSA-vcr5-xr9h-mvc5 PYSEC-2014-92 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-fcys-9ffg-83ek
Aliases: CVE-2014-1927 GHSA-r3vr-prwv-86g9 PYSEC-2014-90 |
security update |
Affected by 4 other vulnerabilities. |
|
VCID-mp7j-4jbd-z7by
Aliases: GHSA-qh62-ch95-63wh |
Duplicate Advisory: python-gnupg allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended |
Affected by 0 other vulnerabilities. |
|
VCID-wzj6-4gcg-3kgt
Aliases: CVE-2014-1928 GHSA-2jc8-4r6g-282j PYSEC-2014-91 |
security update |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-cjka-q519-e3d2 | security update |
CVE-2013-7323
GHSA-c2fx-8r76-gh36 PYSEC-2014-89 |