Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-944j-8ch6-rf6x

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-944j-8ch6-rf6x

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657 A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

gitlab/pypi/m2crypto/CVE-2023-50781

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657 A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

pypa/m2crypto/PYSEC-2026-1595

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657 A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

pysec/PYSEC-2026-1595

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657 A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.