DirectorySecurity Advisories
Sign In
Security Advisories

CGA-45f3-3fmq-7h5w

Published

Last updated

https://images.chainguard.dev/security/CGA-45f3-3fmq-7h5w
Package

airflow

Latest Update
Pending upstream fix
Aliases
  • CVE-2023-50782
  • GHSA-3ww4-gg4f-jr7f

Severity

7.5

High

CVSS V3

Summary

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

Description

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images