python-microservices / pyms

Library of utils to create REST Python Microservices
https://python-microservices.github.io/home/
GNU General Public License v3.0
265 stars 45 forks source link

Bump cryptography from 3.1.1 to 3.2 #213

Closed avara1986 closed 3 years ago

avara1986 commented 3 years ago

GHSA-hggm-jpg3-v476 moderate severity Vulnerable versions: < 3.2 Patched version: 3.2 Impact RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios.

Patches This is fixed in cryptography 3.2. pyca/cryptography@58494b4 is the resolving commit.