Search for packages
| purl | pkg:rpm/redhat/python-rsa@4.5-2?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-f4rp-ce4j-xkd3
Aliases: CVE-2020-13757 GHSA-537h-rv9q-vvph PYSEC-2020-99 |
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:06:43.699519+00:00 | RedHat Importer | Affected by | VCID-f4rp-ce4j-xkd3 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13757.json | 38.0.0 |