hyperledger / indy-plenum

Plenum Byzantine Fault Tolerant Protocol
https://wiki.hyperledger.org/display/indy
Apache License 2.0
215 stars 370 forks source link

[Security] Remove sha3 (CVE-2022-37454) #1679

Closed PatStLouis closed 2 months ago

PatStLouis commented 2 months ago

This package was not critical and features are implemented within hashlib, as pointed out by the package maintainers: https://github.com/tiran/pysha3

Package is archived.

PatStLouis commented 2 months ago

@WadeBarnes hashlib is part of the python standard library: https://docs.python.org/3/library/crypto.html