الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Alexp

#45325من 60,596
6.9إجمالي CVSS
الثغرات · 1
PT-2023-2766
2023-02-07
6.9
CVE-2023-23931
Pypi
Cryptography
The issue is related to the `Cipher.update into` function in the cryptography package, which would accept Python objects that implement the buffer protocol but provide only immutable buffers. This could allow immutable objects, such as `bytes`, to be mutated, violating fundamental rules of Python and resulting in corrupted output. The function now correctly raises an exception. This issue has been present since `update into` was originally introduced in cryptography 1.8.