Search for packages
| purl | pkg:pypi/elixir@0.4.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2012-13
Aliases: CVE-2012-2146 GHSA-vfcg-5ggc-3rxx |
Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent … | There are no reported fixed by versions. |