PT-2020-21452

Published

2020-09-04

·

Updated

2020-09-04

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions parsel versions (affected versions not specified)
Description The issue concerns a hardcoded initialization vector in the parsel package. When the IV is not provided, the package defaults to this hardcoded IV, making the cipher susceptible to chosen plaintext attacks.
Recommendations Consider using an alternative package, as parsel is deprecated and will not receive updates.
Vendors
Affected products
Related identifiers
GHSA-Q643-W9JP-Q2QG
Found an issue in the description? Have something to add? Feel free to write us 👾