Vulnerability	Vulnerable Version
M Timing Attack rsa is a pure-Python RSA implementation. Affected versions of this package are vulnerable to Timing Attack via timed processing of valid `PKCS#1` v1.5 ciphertext. An attacker can recover ciphertexts via a side-channel attack by exploiting the Marvin security flaw. How to fix Timing Attack? Upgrade `rsa` to version 4.7 or higher.	[2.0,4.7)
M Access Restriction Bypass rsa is a pure-Python RSA implementation. Affected versions of this package are vulnerable to Access Restriction Bypass. It does not detect `ciphertext` modification during decryption (prepended "0" bytes) in `PKCS1_v1_5`. How to fix Access Restriction Bypass? Upgrade `rsa` to version 4.1 or higher.	[0,4.1)
M Improper Input Validation `rsa` is a Pure-Python RSA implementation. The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a Berserk attack.	[,3.3)
M Timing Attack `rsa` is a Pure-Python RSA implementation. Affected versions of this package are vulnerable to Timing attacks.	[3.0,3.4.0)
H Authentication Bypass `rsa` is a Pure-Python RSA implementation. Affected versions of this package are vulnerable to Authentication Bypass due to not implementing authentication encryption or use MACs to validate messages before decrypting public key encrypted messages.	[3.0,3.4)

Go back to all versions of this package