DirectorySecurity Advisories
Sign In
Security Advisories

CGA-qwm9-7cvx-g89j

Published

Last updated

https://images.chainguard.dev/security/CGA-qwm9-7cvx-g89j
Package

kubeflow-pipelines

Latest Update
Fixed
Fixed Version

2.0.5-r3

Aliases
  • CVE-2023-50782
  • GHSA-3ww4-gg4f-jr7f

Severity

7.5

High

CVSS V3

Summary

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

Description

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images