Vulnerability	Vulnerable Version
M Timing Attack rsa is a pure-Python RSA implementation. Affected versions of this package are vulnerable to Timing Attack via timed processing of valid `PKCS#1` v1.5 ciphertext. An attacker can recover ciphertexts via a side-channel attack by exploiting the Marvin security flaw. How to fix Timing Attack? Upgrade `rsa` to version 4.7 or higher.	[2.0,4.7)
M Access Restriction Bypass rsa is a pure-Python RSA implementation. Affected versions of this package are vulnerable to Access Restriction Bypass. It does not detect `ciphertext` modification during decryption (prepended "0" bytes) in `PKCS1_v1_5`. How to fix Access Restriction Bypass? Upgrade `rsa` to version 4.1 or higher.	[0,4.1)
M Improper Input Validation `rsa` is a Pure-Python RSA implementation. The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a Berserk attack.	[,3.3)

Go back to all versions of this package