Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Alert #20

Open
github-actions bot opened this issue Feb 6, 2021 · 0 comments
Open

Security Alert #20

github-actions bot opened this issue Feb 6, 2021 · 0 comments

Comments

@github-actions
Copy link

github-actions bot commented Feb 6, 2021

app/poetry.lock

Title Severity CVE Package Name Installed Version Fixed Version References
python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows CRITICAL CVE-2020-36242 cryptography 3.2.1 3.3.2 GHSA-rhm9-p9w5-fwm7
https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst
pyca/cryptography@3.3.1...3.3.2
pyca/cryptography#5615
GHSA-rhm9-p9w5-fwm7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/
https://nvd.nist.gov/vuln/detail/CVE-2020-36242
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

0 participants