Improper Check for Unusual or Exceptional Conditions Affecting openssl-encrypt package, versions [,1.4.0)

openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files

Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the schema validation when the jsonschema library is not installed or when unknown metadata format versions are provided. An attacker can bypass all schema validation by removing the required library from the environment or by supplying metadata with an unrecognized version, resulting in the acceptance of malformed or malicious data.

• GitHub Advisory
• GitHub Commit