Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Alexp

#45325of 60,596
6.9Total CVSS
Vulnerabilities · 1
PT-2023-2766
2023-02-07
6.9
CVE-2023-23931
Pypi
Cryptography
The issue is related to the `Cipher.update into` function in the cryptography package, which would accept Python objects that implement the buffer protocol but provide only immutable buffers. This could allow immutable objects, such as `bytes`, to be mutated, violating fundamental rules of Python and resulting in corrupted output. The function now correctly raises an exception. This issue has been present since `update into` was originally introduced in cryptography 1.8.