CVE-2023-48051

Impact

An issue in `/upydev/keygen.py` in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/Carglglz/upydev/issues/38
• https://github.com/advisories/GHSA-qc4j-hrj6-cppf
• https://nvd.nist.gov/vuln/detail/CVE-2023-48051
• https://github.com/pypa/advisory-database/tree/main/vulns/upydev/PYSEC-2023-302.yaml