Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Alexp

#45325de 60,596
6.9CVSS total
Vulnerabilidades · 1
PT-2023-2766
2023-02-07
6.9
CVE-2023-23931
Pypi
Cryptography
The issue is related to the `Cipher.update into` function in the cryptography package, which would accept Python objects that implement the buffer protocol but provide only immutable buffers. This could allow immutable objects, such as `bytes`, to be mutated, violating fundamental rules of Python and resulting in corrupted output. The function now correctly raises an exception. This issue has been present since `update into` was originally introduced in cryptography 1.8.