amitu / django-encrypted-id

Encrypted IDs for Django Models
BSD 2-Clause "Simplified" License
32 stars 16 forks source link

Switch from pycrypto to pycryptodomex #20

Closed JamesonFinney closed 4 years ago

JamesonFinney commented 5 years ago

Pycrypto has a serious vulnerability disclosed in 2016 which has not been patched in PyPi. The vulnerability is CVE-2013-7459, and is discussed at dlitz/pycrypto#176. Pycryptome is a drop in replacement for Pycrypto, and is currently maintained. I'd suggest migrating from pycrypto to pycryptome.