Homepage
About Snyk

aries-cloudagent@0.3.2 vulnerabilities

Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the aries-cloudagent package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Improper Authentication

aries-cloudagent is a Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments.

Affected versions of this package are vulnerable to Improper Authentication due to faulty verification of the document.proof during the presentation process. An attacker can manipulate the presentation of credentials to appear as verified despite the presence of errors or mismatches in the challenge, potentially leading to unauthorized access or actions.

How to fix Improper Authentication?

Upgrade aries-cloudagent to version 0.10.5, 0.11.0 or higher.

[,0.10.5) [0.11.0rc1,0.11.0)
Go back to all versions of this package