Search for packages
Package details: pkg:pypi/python-gnupg@0.3.7
purl pkg:pypi/python-gnupg@0.3.7
Next non-vulnerable version 0.4.4
Latest non-vulnerable version 0.4.4
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-f7z6-jm9f-aaap
Aliases:
CVE-2019-6690
GHSA-2fch-jvg5-crf6
GHSA-qh62-ch95-63wh
PYSEC-2019-115
PYSEC-2019-45
python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.
0.4.4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-1w6t-r8pu-aaas python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. CVE-2013-7323
GHSA-c2fx-8r76-gh36
PYSEC-2014-89
VCID-hx2x-2bd6-aaag python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323. CVE-2014-1929
GHSA-vcr5-xr9h-mvc5
PYSEC-2014-92

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T14:35:44.789298+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 36.1.3
2025-06-20T14:18:15.516722+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 36.1.3
2025-06-20T14:18:14.650278+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 36.1.3
2025-06-03T21:19:32.023652+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 36.1.0
2025-06-03T21:04:27.568914+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 36.1.0
2025-06-03T21:04:26.956484+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 36.1.0
2025-06-02T21:00:53.371562+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 36.1.2
2025-06-02T20:44:16.485011+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 36.1.2
2025-06-02T20:44:15.778434+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 36.1.2
2025-04-15T02:05:45.028898+00:00 GithubOSV Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json 36.0.0
2025-04-15T01:55:12.637593+00:00 GHSA Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/advisories/GHSA-c2fx-8r76-gh36 36.0.0
2025-04-03T17:33:14.025029+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 36.0.0
2025-04-03T17:05:51.443824+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 36.0.0
2025-04-03T17:05:50.354236+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 36.0.0
2025-02-18T01:29:48.092393+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 35.1.0
2025-02-18T01:29:40.321917+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 35.1.0
2025-02-18T01:13:49.071546+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 35.1.0
2025-01-17T02:29:27.302055+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag None 35.1.0
2025-01-17T02:29:19.468731+00:00 GHSA Importer Fixing VCID-1w6t-r8pu-aaas None 35.1.0
2024-11-20T23:45:33.644494+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 35.0.0
2024-11-20T23:45:25.514075+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 35.0.0
2024-11-20T23:35:06.472499+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 35.0.0
2024-11-18T23:33:51.566437+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 34.3.2
2024-11-18T23:33:43.531395+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 34.3.2
2024-11-18T23:23:56.297006+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 34.3.2
2024-11-02T02:55:49.368075+00:00 GitLab Importer Affected by VCID-f7z6-jm9f-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/GHSA-qh62-ch95-63wh.yml 34.0.2
2024-10-27T02:56:01.290820+00:00 GitLab Importer Fixing VCID-hx2x-2bd6-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2014-1929.yml 34.0.2
2024-10-25T15:32:41.514430+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 34.0.2
2024-10-25T00:24:27.604908+00:00 GHSA Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/advisories/GHSA-c2fx-8r76-gh36 34.0.2
2024-10-15T18:09:08.311226+00:00 GithubOSV Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-vcr5-xr9h-mvc5/GHSA-vcr5-xr9h-mvc5.json 34.0.2
2024-10-15T18:08:51.937774+00:00 GithubOSV Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json 34.0.2
2024-10-07T18:12:28.307212+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-2fch-jvg5-crf6 34.0.2
2024-10-07T16:47:12.384992+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/advisories/GHSA-vcr5-xr9h-mvc5 34.0.2
2024-10-07T16:26:49.592556+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-qh62-ch95-63wh 34.0.2
2024-09-22T18:55:22.996309+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-2fch-jvg5-crf6 34.0.1
2024-09-22T16:50:47.924502+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-qh62-ch95-63wh 34.0.1
2024-09-18T12:29:14.844858+00:00 Pypa Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/pypa/advisory-database/blob/main/vulns/python-gnupg/PYSEC-2019-115.yaml 34.0.1
2024-09-18T12:06:57.671510+00:00 Pypa Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/pypa/advisory-database/blob/main/vulns/python-gnupg/PYSEC-2014-92.yaml 34.0.1
2024-09-18T08:59:56.998039+00:00 GithubOSV Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-vcr5-xr9h-mvc5/GHSA-vcr5-xr9h-mvc5.json 34.0.1
2024-09-18T08:59:52.862216+00:00 GithubOSV Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json 34.0.1
2024-09-17T22:52:29.219380+00:00 PyPI Importer Affected by VCID-f7z6-jm9f-aaap https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.1
2024-09-17T22:50:15.434747+00:00 PyPI Importer Fixing VCID-hx2x-2bd6-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.1
2024-09-17T22:29:50.819023+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 34.0.1
2024-09-17T22:17:00.746763+00:00 GHSA Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/advisories/GHSA-c2fx-8r76-gh36 34.0.1
2024-09-17T22:13:53.223860+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/advisories/GHSA-vcr5-xr9h-mvc5 34.0.1
2024-04-23T22:56:56.334761+00:00 GithubOSV Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-vcr5-xr9h-mvc5/GHSA-vcr5-xr9h-mvc5.json 34.0.0rc4
2024-04-23T22:56:52.988050+00:00 GithubOSV Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json 34.0.0rc4
2024-04-23T19:47:32.419344+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-2fch-jvg5-crf6 34.0.0rc4
2024-04-23T18:01:57.360844+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag None 34.0.0rc4
2024-04-23T18:01:57.254124+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/advisories/GHSA-vcr5-xr9h-mvc5 34.0.0rc4
2024-04-23T17:33:53.430138+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap None 34.0.0rc4
2024-04-23T17:33:53.266683+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-qh62-ch95-63wh 34.0.0rc4
2024-01-09T21:39:06.696944+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-2fch-jvg5-crf6 34.0.0rc2
2024-01-09T19:58:01.511251+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag None 34.0.0rc2
2024-01-09T19:58:01.406145+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/advisories/GHSA-vcr5-xr9h-mvc5 34.0.0rc2
2024-01-09T19:32:45.006700+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap None 34.0.0rc2
2024-01-09T19:32:44.847141+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/advisories/GHSA-qh62-ch95-63wh 34.0.0rc2
2024-01-03T18:35:26.394457+00:00 PyPI Importer Affected by VCID-f7z6-jm9f-aaap https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.0rc1
2024-01-03T18:33:30.887059+00:00 PyPI Importer Fixing VCID-hx2x-2bd6-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.0rc1
2024-01-03T18:27:50.279133+00:00 Pypa Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/pypa/advisory-database/blob/main/vulns/python-gnupg/PYSEC-2014-92.yaml 34.0.0rc1
2024-01-03T18:27:50.211695+00:00 Pypa Importer Affected by VCID-f7z6-jm9f-aaap https://github.com/pypa/advisory-database/blob/main/vulns/python-gnupg/PYSEC-2019-115.yaml 34.0.0rc1
2024-01-03T17:55:01.961166+00:00 GitLab Importer Fixing VCID-1w6t-r8pu-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-gnupg/CVE-2013-7323.yml 34.0.0rc1
2024-01-03T17:46:45.186031+00:00 GHSA Importer Fixing VCID-1w6t-r8pu-aaas https://github.com/advisories/GHSA-c2fx-8r76-gh36 34.0.0rc1
2024-01-03T17:44:02.851877+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag https://github.com/advisories/GHSA-vcr5-xr9h-mvc5 34.0.0rc1
2024-01-03T15:26:26.577364+00:00 GHSA Importer Fixing VCID-hx2x-2bd6-aaag None 34.0.0rc1
2024-01-03T15:10:35.341995+00:00 GHSA Importer Affected by VCID-f7z6-jm9f-aaap None 34.0.0rc1